Libretro

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 5
    Known Exploited: 0
    2
    Critical Level Threats
    1
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-107050

    An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.

    Last Modified: Nov 04, 2026
    Published: Oct 29, 2026

    CVE-2025-9809

    Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.

    Last Modified: Dec 08, 2025
    Published: Sep 01, 2025

    CVE-2025-9136

    libretro RetroArch file_stream.c filestream_vscanf out-of-bounds

    Last Modified: Sep 12, 2025
    Published: Aug 19, 2025

    CVE-2025-0459

    libretro RetroArch Startup profapi.dll untrusted search path

    Last Modified: Apr 15, 2026
    Published: Jan 14, 2025

    CVE-2021-28927

    The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platform_win32.c via the accessibility_speak_windows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection using specially a crafted file and directory names.

    Last Modified: Nov 21, 2024
    Published: Apr 07, 2021
    Items Per Page
    Libretro Vulnerabilities & Security CVEs | CVE-DB