CVE-2024-32944

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer .uar file, .zip file to UTAU, an arbitrary file may be placed...

CVE-2024-32944

The Japanese open source song synthesizer UTAU (versions prior to v0.4.19 ) is vulnerable to a path traversal (CWE-22) flaw. If a user installs a crafted voicebank installer, such as a .uar or .zip file, an attacker can cause an arbitrary file to be placed on the system. To mitigate this risk, us...

CVE-2024-32944: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer .uar file, .zip file to UTAU, an arbitrary file may be placed...