What’s Vulnerable › Vulnerabilities

CVE-2024-32944

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-28 · updated 2026-06-17
• Weakness: CWE-22

Description

Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip file) to UTAU, an arbitrary file may be placed.

Affected products

• ameya/ayame UTAU: before v0.4.19

References

• https://jvn.jp/en/jp/JVN71404925/
• https://utau2008.xrea.jp/
• https://jvn.jp/en/jp/JVN71404925/
• https://utau2008.xrea.jp/

Get alerted when CVE-2024-32944 or the next vulnerability affects your stack