An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.
References
| Link | Resource |
|---|---|
| http://voice.com | Not Applicable |
| https://appcraze.co/ | Product |
| https://github.com/Secsys-FDU/AF_CVEs/issues/25 | Exploit Third Party Advisory |
| https://secsys.fudan.edu.cn/ | Not Applicable |
Configurations
History
06 Apr 2026, 15:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Uxgroupllc voice Recorder
Uxgroupllc |
|
| References | () http://voice.com - Not Applicable | |
| References | () https://appcraze.co/ - Product | |
| References | () https://github.com/Secsys-FDU/AF_CVEs/issues/25 - Exploit, Third Party Advisory | |
| References | () https://secsys.fudan.edu.cn/ - Not Applicable | |
| CPE | cpe:2.3:a:uxgroupllc:voice_recorder:10.0:*:*:*:*:android:*:* |
01 Apr 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
| CWE | CWE-73 |
31 Mar 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-31 16:16
Updated : 2026-04-06 15:11
NVD link : CVE-2026-30284
Mitre link : CVE-2026-30284
CVE.ORG link : CVE-2026-30284
JSON object : View
Products Affected
uxgroupllc
- voice_recorder
CWE
CWE-73
External Control of File Name or Path