Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-72506 EUVD-2026-57716GHSA-c2vf-72cc-2qvx

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination i…

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by jpcert

Description

VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input data or the display of incorrect results.

Affected products

VendorProductAffectedFixed
National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for Android 9.1.3 – ≤ 9.2.0 —
National Institute of Information and Communications Technology "VoiceTra(Voice Translator)" for iOS 9.1.3 – ≤ 9.2.0 —

References