CVE-2025-64776

Summary: CVE-2025-64776 is a Canva Affinity EMF handling vulnerability. A specially crafted EMF file can trigger an out-of-bounds read via the EMF processing path, potentially exposing memory contents. Affected product/version: Canva Affinity 3.0.1.3808 (Affinity suite). Root cause (as described)...