CVE-2025-1413
High
Description
DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects DaVinci Resolve on MacOS in versions before 19.1.3.
SeverityHigh
CVSS8.4
Exploit probability—
ProductDaVinci Resolve
PublishedFeb 28, 2025
First seenFeb 28, 2025
Weakness typeCWE-732CWE-732
How to fix
Update
- Blackmagic Design Inc DaVinci Resolve19.1.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Blackmagic Design Inc DaVinci Resolve | v < 19.1.3 | 19.1.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.