Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority LOW 19

The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereferen…

CVSS 3.1MEDIUM 4.5 Local No auth User interaction EPSS 0.00095 Published 2026-10-09 Fixed in 3.3.1 CWE-129
Priority LOW 16

The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read.

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00097 Published 2026-10-09 Fixed in 3.3.1 CWE-126
Priority LOW 16

The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read.

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00097 Published 2026-10-09 Fixed in 3.3.1 CWE-126
Priority LOW 21

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading t…

CVSS 3.1MEDIUM 4.9 Local No auth No interaction EPSS 0.00096 Published 2026-10-09 Fixed in 3.3.1 CWE-122
Priority LOW 16

The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds h…

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00091 Published 2026-10-09 Fixed in 3.3.1 CWE-125
Priority LOW 13

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document…

CVSS 3.1LOW 2.9 Local No auth No interaction EPSS 0.00097 Published 2026-10-09 Fixed in 3.3.1 CWE-126
Priority LOW 16

The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference.

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00089 Published 2026-10-09 Fixed in 3.3.1 CWE-822