Ameya/ayame Utau vulnerabilities

2 CVEs affecting Ameya/ayame Utau, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-32944, published 2024-05-28.

More from Ameya/ayame.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-28886, published 2024-05-28. High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days. OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.
• CVE-2024-32944, published 2024-05-28. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Path traversal vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product installs a crafted UTAU voicebank installer (.uar file, .zip file) to UTAU, an arbitrary file may be…