high8.4
CVE-2024-28886
OS command injection vulnerability exists in UTAU versions prior to v0.4.19.
Impact
OS command injection vulnerability exists in UTAU versions prior to v0.4.19. If a user of the product opens a crafted UTAU project file (.ust file), an arbitrary OS command may be executed.
Affected products
| Product | Affected versions |
|---|---|
| UTAU | before 0.4.19. |
Versions were read from the advisory text. No structured product data has been published for this record yet.