Approved changes feed: RSS · Atom

cpe:2.3:a:blackmagic_design_inc:davinci_resolve:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBlackmagic Design Inc (1886eb5a-824c-53f2-8107-348b0410fca5)
ProductDavinci Resolve (2ad28a0c-7f4e-5903-a857-49b8ddff64df)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1413 vulnerable 2026-06-08 07:08:36.772325 Dylib Hijacking in DaVinci Resolve
DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects DaVinci Resolve on MacOS in versions before 19.1.3.
Published: 2025-02-28T08:25:24.641Z
Updated: 2025-10-03T09:05:06.426Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.