Remote code execution via overflowed frame allocation

Heap-based buffer overflow in DaVinci Resolve 17.3.1.0005 allows remote attackers to execute code through a crafted R3D decode job. DPDecoder multiplies attacker-controlled frame width, height, and bytes per pixel as a signed size, adds 0xfff without rejecting overflow, allocates the wrapped size, and copies a decoded frame into the undersized heap buffer. The DPDecoder service must be listening and able to access the supplied R3D file; successful exploitation runs code in the application context, while the published proof of concept demonstrates a service crash.