Skip to content
Fencer Vulns
critical 9.8

CVE-2021-40417 in the critical feed json

When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that w…

published 2021-12-22 4 y ago modified 2026-06-17 4 mo ago also EUVD-2021-27594

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
15.7%
EPSS 15.7% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known

Summary

When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that were submitted with the job along with fields that were parsed for the submitted video by the R3D SDK to calculate the size of a heap buffer. Due to an integer overflow with regards to this calculation, this can result in an undersized heap buffer being allocated. When this heap buffer is written to, a heap-based buffer overflow will occur. This can result in code execution under the context of the application.

Exploit prediction

15.68% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • talosintelligence.com https://talosintelligence.com/vulnerability_reports/TALOS-2021-1426 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • n/a Blackmagic Design

Classification

Weakness
  • CWE-680 Integer Overflow to Buffer Overflow
  • CWE-190 Integer Overflow or Wraparound

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.