Executive Summary

CVE-2025-62500 is an out-of-bounds read vulnerability in the EMF (Enhanced Metafile Format) processing functionality of Canva Affinity, specifically in version 3.0.1.3808.

The vulnerability arises because the software does not properly validate certain fields (nDescription and offDescription) in the EMR_HEADER structure of an EMF file. These fields specify the location and length of a description string within the file.

If an attacker crafts a malicious EMF file where the sum of offDescription and nDescription exceeds the size of the header, the software reads memory beyond the intended buffer. This out-of-bounds read can lead to disclosure of sensitive information from memory.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing an attacker to disclose sensitive information from the memory of the affected system.

Because the vulnerability involves reading memory outside the intended buffer, confidential data stored in memory could be exposed.

The attack requires local access and user interaction, but does not require privileges, and has a low attack complexity.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves the processing of specially crafted EMF files by Canva Affinity version 3.0.1.3808. Detection would focus on identifying the presence of such malicious EMF files or monitoring the application behavior during EMF file loading.

Since the vulnerability requires local access and user interaction, detection can include monitoring for unusual or unexpected EMF files being opened in Canva Affinity.

Specific commands to detect this vulnerability are not provided in the available resources.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include avoiding opening untrusted or suspicious EMF files in Canva Affinity, especially version 3.0.1.3808.

Since the vulnerability requires local access and user interaction, restricting user access to Canva Affinity or disabling EMF file support temporarily can reduce risk.

Applying any available patches or updates from the software vendor once released is recommended.

Useful 0 Not Useful 0