Summary
It was discovered that RetroArch did not correctly handle certain memory
operations, which could lead to a buffer overflow. If a user or automated
system were tricked into opening a specially crafted file, an attacker
could possibly use this issue to cause a denial of service or execute
arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | retroarch | 1.20.0+dfsg-3ubuntu0.1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | retroarch | 1.18.0+dfsg-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
High 8.4
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers …
References
-
report
https://ubuntu.com/security/CVE-2025-9809