CVE-2025-9136
libretro RetroArch file_stream.c filestream_vscanf out-of-bounds
Summary
libretro RetroArch file_stream.c filestream_vscanf out-of-bounds
Original description
The description as published by the source.
A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It is recommended to upgrade the affected component.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-9136 retroarch
- Ubuntu UBUNTU-CVE-2025-9136 retroarch
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- patch github.com
- patch github.com
- report github.com
- report github.com
- report vuldb.com