Critical severity9.8NVD Advisory· Published Sep 1, 2025· Updated Jun 17, 2026
CVE-2025-9809
CVE-2025-9809
Description
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:libretro:libretro-common:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:libretro:libretro-common:-:*:*:*:*:*:*:*
- (no CPE)range: all versions
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- github.com/libretro/libretro-common/issues/222nvdIssue TrackingThird Party Advisory
- github.com/libretro/libretro-common/blob/master/formats/cdfs/cdfs.cnvdProduct
News mentions
0No linked articles in our index yet.