CVE-2021-40417

CVE-2021-40417 describes a heap-based buffer overflow in Blackmagic Design DaVinci Resolve’s DPDecoder service when processing a job payload that uses the R3D SDK to compute a heap buffer size. An integer overflow in this calculation can allocate an undersized buffer, and when Data is written int...