This vulnerability in UXGROUP LLC Voice Recorder v10.0 enables an attacker to overwrite critical internal files through the file import functionality. Exploitation can result in arbitrary code execution or information disclosure. The CVSS 3.1 base score is 8.6, reflecting high impact on confidentiality, integrity, and availability. The attack vector is local with low complexity and no privileges required, but user interaction is necessary. The vulnerability is categorized under CWE-73 (Improper Neutralization of File Path Elements). No known exploits in the wild or patches have been reported as of the publication date.

Successful exploitation allows an attacker to overwrite important internal files, potentially leading to full system compromise via arbitrary code execution or unauthorized access to sensitive information. The vulnerability affects confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when importing files and restrict access to the application to trusted users only.