CVE-2026-103220

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...

CVE-2026-103220

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...

CVE-2026-103220

The Affinity by Canva application, in versions prior to 3.3.1 (October 2026 release), is vulnerable to an out-of-bounds block-array read. The root cause is inadequate bounds checking when parsing raster image data within Affinity document files, which can lead to an out-of-bounds read and the der...