Blackmagic DaVinci Resolve Incorrect File Permissions Vulnerability Allowing Privilege Escalation on macOS

A vulnerability in Blackmagic DaVinci Resolve on macOS was identified, where the application was installed with overly permissive file rights (rwxrwxrwx). This permission setting deviates from standard macOS security norms, which dictate that applications should have drwxr-xr-x permissions. The excessive permissions create an opportunity for Dylib Hijacking, a technique that can be exploited by the guest account, other users, and applications to escalate privileges. This vulnerability affects all DaVinci Resolve versions on macOS prior to 19.1.3.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation on the affected system.