CVE-2021-28927

The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platformwin32.c via the accessibilityspeakwindows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection...

CVE-2021-28927

The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platformwin32.c via the accessibilityspeakwindows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection...

CVE-2021-28927

CVE-2021-28927 affects the Windows build of libretro RetroArch (1.9.0). The vulnerability resides in the text-to-speech engine: the function accessibility_speak_windows in platform_win32.c passes unsanitized input to PowerShell, enabling command-injection-like behavior when an attacker has write ...