Skip to content
OpenAdvisories
High · 8.4 CVE-2024-28886 EUVD-2024-34432

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.u…

Published May 28, 2024 · Updated Aug 2, 2024 · Assigned by jpcert

Vendor: ameya/ayame Product: UTAU

Description

OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.

Affected products

VendorProductAffectedFixed
ameya/ayame UTAU prior to v0.4.19 —

References