// For flags

CVE-2021-40418

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the uninitialized member will be dereferenced and then destroyed using the object’s virtual destructor. Due to the object property being uninitialized, this can result in dereferencing an arbitrary pointer for the object’s virtual method table, which can result in code execution under the context of the application.

Cuando es analizado un archivo que se envía al servicio DPDecoder como un trabajo, el SDK R3D omite por error la asignación de una propiedad que contiene un objeto que hace referencia a un UUID que fue analizada desde un fotograma dentro del contenedor de vídeo. Tras la destrucción del objeto que lo posee, el miembro no inicializado será desreferenciado y luego destruido usando el destructor virtual del objeto. Debido a que la propiedad del objeto no está inicializada, esto puede resultar en una desreferenciación de un puntero arbitrario para la tabla de métodos virtuales del objeto, que puede resultar en una ejecución de código bajo el contexto de la aplicación

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-09-01 CVE Reserved
  • 2021-12-22 CVE Published
  • 2024-08-04 CVE Updated
  • 2024-08-04 First Exploit
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-457: Use of Uninitialized Variable
  • CWE-908: Use of Uninitialized Resource
CAPEC
References (1)
URL Tag Source
URL Date SRC
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1427 2024-08-04
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Blackmagicdesign
Search vendor "Blackmagicdesign"
 Davinci Resolve
Search vendor "Blackmagicdesign" for product "Davinci Resolve"
 17.3.1.0005
Search vendor "Blackmagicdesign" for product "Davinci Resolve" and version "17.3.1.0005"
-
Affected