Description (CNA)
VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| National Institute of Information and Communications Technology / "VoiceTra(Voice Translator)" for Android | affected 9.1.3 through 9.2.0 |
| National Institute of Information and Communications Technology / "VoiceTra(Voice Translator)" for iOS | affected 9.1.3 through 9.2.0 |
CWE
CWE-941
References
- https://www.nict.go.jp/en/topics/2026/08/10-1.html
- https://www.nict.go.jp/publicity/topics/2026/08/10-1.html
- https://jvn.jp/en/jp/JVN00941257/
ADP enrichment
No English description supplied.
No references supplied.