libretro
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| RetroArch | 2 | – | Aug 19, 2025 |
| libretro-common | 1 | – | Sep 1, 2025 |
Exploited and recent CVEs
- CVE-2025-9809 Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH 0.4%
- CVE-2025-9136 libretro RetroArch file_stream.c filestream_vscanf out-of-bounds 0.2%
- CVE-2025-0459 libretro RetroArch Startup profapi.dll untrusted search path 0.2%