CVE-2021-40417

CVE-2021-40417 describes a heap-based buffer overflow in Blackmagic Design DaVinci Resolve’s DPDecoder service when processing a job payload that uses the R3D SDK to compute a heap buffer size. An integer overflow in this calculation can allocate an undersized buffer, and when Data is written int...

CVE-2021-40418

CVE-2021-40418 affects Blackmagic Design DaVinci Resolve’s R3D DPDecoder service and the R3D SDK. The issue arises when DPDecoder parses a file: it can skip assigning a property that should reference an UUID object parsed from a frame, leaving that member uninitialized. Upon destruction, the unin...