Blackmagicdesign Davinci Resolve vulnerabilities

CVE-2021-40418 [CRITICAL] CWE-457 CVE-2021-40418: When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the uninitialized member will be dereferenced and then destroyed u

CVE-2021-40417 [CRITICAL] CWE-680 CVE-2021-40417: When parsing a file that is submitted to the DPDecoder service as a job, the service will use the co When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that were submitted with the job along with fields that were parsed for the submitted video by the R3D SDK to calculate the size of a heap buffer. Due to an integer overflow with regards to this calculation, this can