CVE catalog

CVE-2025-9809

RetroArch vulnerability

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.42% · Oct 25, 2026

Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianretroarchsid1.22.2+dfsg-3vulnerable
Debianretroarchforky1.22.2+dfsg-3vulnerable
Debianretroarchtrixie1.20.0+dfsg-2vulnerable
Debianretroarchbookworm1.14.0+dfsg-1vulnerable
UbunturetroarchnobleNot reportedvulnerable
Ubunturetroarchnoble1.18.0+dfsg-1ubuntu0.1~esm1fixed
Ubunturetroarch-devnoble1.18.0+dfsg-1ubuntu0.1~esm1fixed
Ubunturetroarchpro1.14.0+dfsg-1build1vulnerable
Ubunturetroarchpro1.15.0+dfsg-1vulnerable
Ubunturetroarchpro1.16.0.3+dfsg-1vulnerable
Ubunturetroarchpro1.18.0+dfsg-1vulnerable
Ubunturetroarchpro1.18.0+dfsg-1ubuntu0.1~esm1fixed
Ubunturetroarch25.101.20.0+dfsg-2build1vulnerable
Ubunturetroarch25.101.20.0+dfsg-2build2vulnerable
Ubunturetroarch25.101.20.0+dfsg-3vulnerable
Ubunturetroarch25.101.20.0+dfsg-3ubuntu0.1fixed
Ubunturetroarchpro1.14.0+dfsg-1build1vulnerable
Ubunturetroarchpro1.15.0+dfsg-1vulnerable
Ubunturetroarchpro1.16.0.3+dfsg-1vulnerable
Ubunturetroarchpro1.18.0+dfsg-1vulnerable
Ubunturetroarchpro1.18.0+dfsg-1ubuntu0.1~esm1fixed
Ubunturetroarch25.101.20.0+dfsg-2build1vulnerable
Ubunturetroarch25.101.20.0+dfsg-2build2vulnerable
Ubunturetroarch25.101.20.0+dfsg-3vulnerable
Ubunturetroarch25.101.20.0+dfsg-3ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianretroarchsourcesid(unfixed)unimportantNot reportedNot reported
Debianretroarchsourceforky(unfixed)unimportantNot reportedNot reported
Debianretroarchsourcetrixie(unfixed)unimportantNot reportedNot reported
Debianretroarchsourcebookworm(unfixed)unimportantNot reportedNot reported
Ubunturetroarchdebnoble1.18.0+dfsg-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubunturetroarch-devdebnoble1.18.0+dfsg-1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubunturetroarchdebpro1.18.0+dfsg-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2025-9809Not reported
Ubunturetroarchdeb25.101.20.0+dfsg-3ubuntu0.1Not reportedUBUNTU-CVE-2025-9809Not reported
Ubunturetroarchdebpro1.18.0+dfsg-1ubuntu0.1~esm1Not reportedUSN-8166-1Not reported
Ubunturetroarchdeb25.101.20.0+dfsg-3ubuntu0.1Not reportedUSN-8166-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [retroarch]Affected
    Details (2)

    • 1.14.0+dfsg-1 · amd64 · bookworm

      Affected

      usn · retroarch · debian · bookworm; usn · retroarch · debian · 12

    • 1.14.0+dfsg-1 · arm64 · bookworm

      Affected

      usn · retroarch · debian · bookworm; usn · retroarch · debian · 12

  • [retroarch-dev]Affected

    Source package: [retroarch]

    Details (2)

    • 1.14.0+dfsg-1 · all · bookworm

      Affected

      usn · retroarch · debian · bookworm; usn · retroarch · debian · 12

    • 1.14.0+dfsg-1 · all · bookworm

      Affected

      usn · retroarch · debian · bookworm; usn · retroarch · debian · 12

[Debian 13 (Trixie)]

  • [retroarch]Affected

    Source package: [retroarch]

    Details (2)

    • 1.20.0+dfsg-2+b1 · amd64 · trixie

      Affected

      usn · retroarch · debian · 13

    • 1.20.0+dfsg-2+b1 · arm64 · trixie

      Affected

      usn · retroarch · debian · 13

  • [retroarch-dev]Affected

    Source package: [retroarch]

    Details (2)

    • 1.20.0+dfsg-2 · all · trixie

      Affected

      usn · retroarch · debian · 13

    • 1.20.0+dfsg-2 · all · trixie

      Affected

      usn · retroarch · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]