Libretro vulnerabilities
We track 2 vulnerabilities in Libretro products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 1, 2025.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Libretro vulnerabilities
- 9.8 Critical severity
libretro-common: Out-of-bounds Write
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size bu
- 7.8 High severity
RetroArch: Out-of-bounds Read
A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to