CVE-2023-51455 | DJI Mavic 3 Pro Service Port 10000 libv2_sdk.so on_receive_session_packet_ack array index

A vulnerability was found in DJI Mavic 3 Pro, Mavic 3, Mavic 3 Classic, Mavic 3 Enterprise, Matrice 300, Matrice M30 and Mini 3 Pro. It has been declared as critical. This vulnerability affects the function on_receive_session_packet_ack of the file libv2_sdk.so of the component Service Port 10000. The manipulation leads to improper validation of array index.

This vulnerability was named CVE-2023-51455. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.