Skip to content
OpenAdvisories
Low · 3.3 CVE-2024-32944 EUVD-2024-34470

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer…

Published May 28, 2024 · Updated Oct 29, 2024 · Assigned by jpcert

Vendor: ameya/ayame Product: UTAU

Description

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip file) to UTAU, an arbitrary file may be placed.

Affected products

VendorProductAffectedFixed
ameya/ayame UTAU prior to v0.4.19 —

References