Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-66503

Опубликовано: 17 мар. 2026
Источник: nvd
CVSS3: 6.1
CVSS3: 7.1
EPSS Низкий

Описание

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:canva:affinity:*:*:*:*:*:windows:*:*
Версия до 3.1.0 (исключая)

EPSS

Процентиль: 3%
0.00014
Низкий

6.1 Medium

CVSS3

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.1
github
около 2 месяцев назад

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

EPSS

Процентиль: 3%
0.00014
Низкий

6.1 Medium

CVSS3

7.1 High

CVSS3

Дефекты

CWE-125