CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

DEBIAN-CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

CVE-2025-9809

CVE-2025-9809 affects libretro-common’s cdfs_open_cue_track: an out-of-bounds write allows a crafted .cue file with a PATH_MAX_LENGTH-exceeding path to be copied via memcpy into a fixed-size buffer, enabling arbitrary code execution. Reported across multiple feeds (NVD, Debian/Ubuntu advisories, ...