CVE-2025-9809

EUVD-2025-26355
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 35.44%
Affected Products (NVD)
VendorProductVersion
libretrolibretro-common
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
retroarch
bookworm
unimportant
bullseye
unimportant
forky
unimportant
sid
unimportant
trixie
unimportant
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
retroarch
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
Fixed 1.18.0+dfsg-1ubuntu0.1~esm1
released
plucky
ignored
questing
Fixed 1.20.0+dfsg-3ubuntu0.1
released
resolute
not-affected
Common Weakness Enumeration
References
https://github.com/libretro/libretro-common/blob/master/formats/cdfs/cdfs.c#L471
https://github.com/libretro/libretro-common/issues/222