CyberRota Analysis
AI-GeneratedThe Affinity by Canva application prior to version 3.3.0 is vulnerable due to insufficient bounds checking when parsing Affinity document files, leading to a stack-based buffer overflow. This flaw allows a threat actor to craft a malicious document that, when opened, could enable arbitrary code execution on the user's system. Organizations using this application should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in arbitrary code execution.