CVE-2024-32944

Publication date

2024-05-28 03:11:04

Family

jpcert

State

PUBLISHED

Description

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip file) to UTAU, an arbitrary file may be placed.