Description
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| libretro | libretro-common | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | retroarch | No fix yet | — |
| Debian 13 | retroarch | No fix yet | — |
| Debian 12 | retroarch | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | retroarch | 1.20.0+dfsg-3ubuntu0.1 | USN-8166-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | retroarch | 1.18.0+dfsg-1ubuntu0.1~esm1 | USN-8166-1 |
Advisories 1
- USN-8166-1 retroarch vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026