Vulnerability Description
Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to invoke privileged operations, including factory reset with user-data wipe (transaction 153), shutdown (105), clock/timezone change (101/123), and the firmware-apply hand-off (151), because onTransact() performs no caller-identity or permission check.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-114356?
CVE-2026-114356 is a documented vulnerability. Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no permissions to invoke...
How severe is CVE-2026-114356?
CVSS scoring is not yet available for CVE-2026-114356. Check NVD for updates.
Is there a patch for CVE-2026-114356?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.