blackmagicdesign records
5 published records for vendor blackmagicdesign.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-306 Missing Authentication for Critical Function1
- CWE-457 Use of Uninitialized Variable1
- CWE-680 Integer Overflow to Buffer Overflow1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2021-40418No exploit | When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property blackmagicdesign · davinci resolve · CWE-457 | Critical9.8 | — | 17.9% | Dec 22, 2021 |
44Plan | CVE-2021-40417No exploit | When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that weblackmagicdesign · davinci resolve · CWE-680 | Critical9.8 | — | 15.6% | Dec 22, 2021 |
39Monitor | CVE-2025-57432No exploit | Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands.blackmagicdesign · web presenter hd firmware · CWE-306 | Critical9.8 | — | 0.6% | Sep 22, 2025 |
39Monitor | CVE-2025-57441No exploit | The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on portblackmagicdesign · atem mini pro firmware · CWE-200 | Critical9.8 | — | 0.5% | Sep 22, 2025 |
39Monitor | CVE-2025-57437No exploit | The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977.blackmagicdesign · web presenter hd firmware · CWE-200 | Critical9.8 | — | 0.5% | Sep 22, 2025 |
- CVE-2021-4041844Plan
When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property
CriticalCVSS 9.8No exploitEPSS 17%blackmagicdesign · davinci resolveDec 22, 2021
- CVE-2021-4041744Plan
When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that we
CriticalCVSS 9.8No exploitEPSS 15%blackmagicdesign · davinci resolveDec 22, 2021
- CVE-2025-5743239Monitor
Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands.
CriticalCVSS 9.8No exploitEPSS 0%blackmagicdesign · web presenter hd firmwareSep 22, 2025
- CVE-2025-5744139Monitor
The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port
CriticalCVSS 9.8No exploitEPSS 0%blackmagicdesign · atem mini pro firmwareSep 22, 2025
- CVE-2025-5743739Monitor
The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977.
CriticalCVSS 9.8No exploitEPSS 0%blackmagicdesign · web presenter hd firmwareSep 22, 2025