What is the CVSS score of CVE-2025-61979?

CVE-2025-61979 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L. EPSS exploitation probability: 0.0%.

Which versions of Affinity are affected by CVE-2025-61979?

CVE-2025-61979 presents moderate security risk, a out-of-bounds read vulnerability rated CVSS 6.1. Exploitation could cause memory corruption or application crashes.

How to fix or mitigate CVE-2025-61979?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Affinity CVE-2025-61979

EUVD-2025-208789 MEDIUM

Out-of-bounds Read (CWE-125)

2026-03-17 talos

Buffer Overflow Information Disclosure Affinity

6.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 17, 2026 - 20:30 euvd

EUVD-2025-208789

Analysis Generated

Mar 17, 2026 - 20:30 vuln.today

CVE Published

Mar 17, 2026 - 18:52 nvd

MEDIUM 6.1

DescriptionCVE.org

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

AnalysisAI

An out-of-bounds read vulnerability exists in the EMF (Enhanced Metafile) file handling functionality of Canva Affinity, allowing an attacker to read memory beyond allocated buffer boundaries by crafting a malicious EMF file. This vulnerability affects Canva Affinity version 3.0.1.3808 and potentially earlier versions, and requires user interaction (opening a specially crafted file) but no elevated privileges to exploit. Successful exploitation can disclose sensitive information from process memory, with potential for limited availability impact; no public exploit code or active exploitation in the wild has been confirmed based on available intelligence.

Technical ContextAI

The vulnerability resides in Canva Affinity's EMF (Enhanced Metafile) file parser, a graphics format commonly used in Windows environments for vector graphics and document rendering. The root cause is classified under CWE-125 (Out-of-bounds Read), a memory safety defect where the parser fails to properly validate buffer boundaries when reading EMF record structures or metadata. When a malformed EMF file is processed, the parser attempts to read beyond the allocated memory region assigned to store EMF data, potentially exposing adjacent heap or stack memory containing sensitive information such as encryption keys, API tokens, or other process state. The affected product is specifically Canva Affinity (CPE: cpe:2.3:a:canva:affinity:*:*:*:*:*:*:*:*), a design and productivity application that handles multiple file formats including EMF for compatibility with Microsoft Office and other tools.

RemediationAI

The primary remediation is to upgrade Canva Affinity to a patched version released by Canva following coordination with Talos Intelligence; users should immediately check the Canva security advisory at https://trust.canva.com/?tcuUid=1f728b0d-17f3-4c9c-97e9-6662b769eb62 for available patches and apply them without delay. Until a patch is available or deployed, implement preventive controls by disabling EMF file import functionality if operationally feasible, educating users not to open EMF files from untrusted sources, and enforcing file type restrictions at the application level. Additionally, isolate systems running vulnerable Affinity versions from high-sensitivity networks and monitor process memory for signs of unauthorized access or data exfiltration through endpoint detection and response (EDR) tools if data classification warrants such monitoring.