CVE-2026-30284

An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://appcraze.co/	Product
https://github.com/Secsys-FDU/AF_CVEs/issues/25	Exploit Third Party Advisory
https://secsys.fudan.edu.cn/	Not Applicable

Configurations

Configuration 1 (hide)

cpe:2.3:a:uxgroupllc:voice_recorder:10.0:*:*:*:*:android:*:*

History

No history.

Information

Published : 2026-03-31 16:16

Updated : 2026-07-24 20:10

NVD link : CVE-2026-30284

Mitre link : CVE-2026-30284

CVE.ORG link : CVE-2026-30284

JSON object : View

Products Affected

uxgroupllc

voice_recorder

CWE

CWE-73

External Control of File Name or Path

{"id": "CVE-2026-30284", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30284", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T18:05:43.917725Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-03-31T16:16:29.950", "references": [{"url": "https://appcraze.co/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/Secsys-FDU/AF_CVEs/issues/25", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://secsys.fudan.edu.cn/", "tags": ["Not Applicable"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure."}, {"lang": "es", "value": "Una vulnerabilidad de sobrescritura arbitraria de archivos en UXGROUP LLC Voice Recorder v10.0 permite a los atacantes sobrescribir archivos internos cr\u00edticos a trav\u00e9s del proceso de importaci\u00f3n de archivos, lo que lleva a ejecuci\u00f3n de c\u00f3digo arbitrario o exposici\u00f3n de informaci\u00f3n."}], "lastModified": "2026-07-24T20:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:uxgroupllc:voice_recorder:10.0:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "33CEA8DD-C154-4514-B536-E280CC6E06A1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}