CVE-2025-9809

Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - 96148269-fe82-4198-b1bf-3a73ce8bc92e

Published

2025-09-01

Last modified

2025-09-03

Weaknesses

CWE-787

Affected products

• Libretro-common (Libretro)

References

• https://github.com/libretro/libretro-common/blob/master/formats/cdfs/cdfs.c#L471
• https://github.com/libretro/libretro-common/issues/222