Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2025-9136

A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It is recommended to upgrade the affected component.

  • Published: Aug 19, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-9136
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:L/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
libretro / retroarch 1.18.0 1.18.0.x
libretro / retroarch 1.19.0 1.19.0.x
libretro / retroarch 1.20.0 1.20.0.x