CVE-2025-9136
libretro RetroArch file_stream.c filestream_vscanf out-of-bounds
Résumé
libretro RetroArch file_stream.c filestream_vscanf out-of-bounds
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It is recommended to upgrade the affected component.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-9136 retroarch
- Ubuntu UBUNTU-CVE-2025-9136 retroarch
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- patch github.com
- patch github.com
- report github.com
- report github.com
- report vuldb.com