CVE-2025-1413

Published: 2025-02-28T09:15Z

Last Modified: 2025-03-26T16:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects DaVinci Resolve on MacOS in versions before 19.1.3. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt