Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-17 | 2 | Disclosure2 |
| 2026-03-18 | 1 | Disclosure1 |
CVE-2025-66342 Type Confusion Vulnerability in Canva Affinity EMF Functionality Enables Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-66342
Post summary
The post announces a type‑confusion vulnerability in Canva Affinity’s EMF functionality that could lead to code execution, but offers no evidence of exploitation, PoC, or patch availability.
CVE Alert: CVE-2025-66342 - Canva - Affinity - https://www.redpacketsecurity.com/cve-alert-cve-2025-66342-canva-affinity/ #OSINT #ThreatIntel #CyberSecurity #cve-2025-66342 #canva #affinity
Post summary
A concise CVE alert for CVE-2025-66342 affecting Canva and Affinity, pointing to an external site for details, but no in‑text technical or exploit information.
CVE-2025-66342 A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memor… https://www.cve.org/CVERecord?id=CVE-2025-66342
Post summary
The post reports that CVE-2025-66342 is a type confusion flaw in Canva Affinity’s EMF handling, triggered by a crafted file, without mentioning patches, exploits, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canva | affinity | - | windows | - |