Buffer Overflow Vulnerability in Affinity by Canva Application

CVE-2026-81546

What is CVE-2026-81546?

The Affinity application developed by Canva prior to version 3.3.0 contains a vulnerability due to insufficient bounds checking when processing Affinity document files. This flaw can be exploited by threat actors who craft malicious Affinity documents. If these documents are opened by users of the application, it could potentially lead to arbitrary code execution, allowing attackers to manipulate the system or steal sensitive information.

References