CVE-2025-9136
Published
CVSS v3
5.3
MEDIUM
CVSS v2
4.3
MEDIUM
Affected
1
PROJECT
Description
A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It is recommended to upgrade the affected component.
Cross-platform, sophisticated frontend for the libretro API. Licensed GPLv3.
GitHub