Vulnerability in Blackmagicdesign Davinci Resolve
CVE-2021-40418
When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the uninitialized member will be dereferenced and then destroyed using the object’s virtual destructor. Due to the object property being uninitialized, this can result in dereferencing an arbitrary pointer for the object’s virtual method table, which can result in code execution under the context of the application.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.179 (97.1th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 97th percentile — 97.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.179 · newest: 0.179 · change: 0.000
Affected products
- Blackmagicdesign Davinci Resolve — versions 17.3.1.0005
- Blackmagic Design — versions Blackmagic Design DaVinci Resolve 17.3.1.0005
Weakness classification (CWE)
References
- talosintelligence.com/vulnerability_reports/TALOS-2021-1427 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2021-40418?
- CVE-2021-40418 is a critical-severity vulnerability in Blackmagicdesign Davinci Resolve, classified under CWE-457. CVSS score: 9.8/10. Published 2021-12-22.
- How severe is CVE-2021-40418?
- Critical severity. CVSS v3 base score is 9.8 out of 10.