Full Report
Incorrect Privilege Assignment vulnerability (CVE-2025-1413) has been found in DaVinci Resolve application.
Analysis Summary
# Vulnerability: Incorrect Privilege Assignment in DaVinci Resolve (CVE-2025-1413)
## CVE Details
- CVE ID: CVE-2025-1413
- CVSS Score: N/A (Score not provided in context)
- CWE: CWE-266 (Incorrect Privilege Assignment)
## Affected Systems
- Products: DaVinci Resolve
- Versions: All versions before 19.1.3
- Configurations: Specifically impacts deployments on **macOS**.
## Vulnerability Description
The vulnerability stems from the DaVinci Resolve application on macOS being installed with overly permissive file permissions (`rwxrwxrwx`). This deviates from standard macOS security practices (which prefer `drwxr-xr-x` permissions). This improper permission assignment facilitates **Dylib Hijacking**, allowing unauthorized users or applications, including those running under a **Guest account**, to potentially escalate privileges.
## Exploitation
- Status: Information regarding active exploitation or PoC availability is not provided. Assume potential risk.
- Complexity: Likely **Low to Medium**, as Dylib Hijacking often relies on known modification paths once the specific application files are targeted.
- Attack Vector: **Local** (Requires local access to run malicious code or exploit the file permissions).
## Impact
- Confidentiality: High (Potential for unauthorized information access via hijacked libraries)
- Integrity: High (Potential for unauthorized code execution and modification of application behavior)
- Availability: Medium (Potential for application instability or service degradation)
## Remediation
### Patches
- **DaVinci Resolve Version 19.1.3** or later is expected to contain fixes for this issue.
### Workarounds
- No specific advisories mention workarounds other than upgrading. Temporarily, manually reviewing and correcting file permissions on the DaVinci Resolve installation directory to adhere to secure macOS standards (`drwxr-xr-x` where appropriate) might serve as a temporary defense, though this is not officially recommended.
## Detection
- Indicators of compromise: Unexpected execution of code originating from hijacked dynamically linked libraries loaded by DaVinci Resolve.
- Detection methods and tools: System monitoring tools capable of detecting unauthorized library loading attempts (Dylib Hijacking) or file integrity monitoring of the DaVinci Resolve installation directory for permission changes.
## References
- Vendor: Blackmagic Design Inc
- Advisory Source: CERT Polska
- Relevant links:
- CVE Record: hxxps://www.cve.org/CVERecord?id=CVE-2025-1413
- CVD Policy (CERT Polska): hxxps://cert.pl/en/cvd/