CVE-2023-51456

mediumpriority · track · 0EPSS 0.002 · 16 %ileEURU

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.24% (16th) EPSS

CVSS 6.8 · medium

Is it mine?

21 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a crafted payload due to a missing input sanity check in the v2_pack_array_to_msg function implemented in the libv2_sdk.so library imported by the v2_sdk_service binary implementing the service, potentially leading to a memory information leak or an arbitrary code execution. Affected models are Mavic 3 Pro until v01.01.0300, Mavic 3 until v01.00.1200, Mavic 3 Classic until v01.00.0500, Mavic 3 Enterprise until v07.01.10.03, Matrice 300 until v57.00.01.00, Matrice M30 until v07.01.0022 and Mini 3 Pro until v01.00.0620.

cvss

Technical severity, 0–10. One row per scoring source.

6.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.8mediumAV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.16.8mediumCVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.16.8mediumCVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · prodsec@nozominetworks.comexploitability 0.9 · impact 5.9

v3.16.2mediumCVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-125USCWE-20USCWE-787US

affected products (21)

Products and version ranges known to be affected.

Matrice 300all versionsenisa_euvdEU
Matrice 3000 → 57.00.01.00enisa_euvdEU
Matrice M30all versionsenisa_euvdEU
Matrice M300 → 07.01.0022enisa_euvdEU
Mavic 3all versionsenisa_euvdEU
Mavic 30 → 01.00.1200enisa_euvdEU
Mavic 3 Classicall versionsenisa_euvdEU
Mavic 3 Classic0 → 01.00.0500enisa_euvdEU
Mavic 3 Enterpriseall versionsenisa_euvdEU
Mavic 3 Enterprise0 → 7.01.10.03enisa_euvdEU
Mavic 3 Proall versionsenisa_euvdEU
Mavic 3 Pro0 → 01.01.0300enisa_euvdEU
Mini 3 Proall versionsenisa_euvdEU
Mini 3 Pro0 → 01.00.0620enisa_euvdEU
SZ DJI Technology Co., Ltd DJI Matrice 300≤ 57.00.01.00fstec_bduRU
SZ DJI Technology Co., Ltd DJI Matrice M30≤ 07.01.0022fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3≤ 01.00.1200fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3 Classic≤ 01.00.0500fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3 Enterprise≤ 07.01.10.03fstec_bduRU
SZ DJI Technology Co., Ltd DJI Mavic 3 Pro≤ 01.01.0300fstec_bduRU

showing 20 of 21

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2024-04-02modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan