Skip to content

PatchFirst · Latest vulnerabilities

retroarch vulnerabilities

Vulnerabilities published for retroarch in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2025-9136
Medium · CVSS 4.8EPSS 0.21%No fix published
libretro RetroArch file_stream.c filestream_vscanf out-of-bounds
A flaw has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. The attack needs to be launched locally. Upgrading to version 1.21.0 mitigates this issue. It is recommended to upgrade the affected component.
retroarch Operating systems
Published August 19, 2025Updated August 19, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2018-16981
High · CVSS 8.8EPSS 1.59%No fix published
CVE-2018-16981
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__out_gif_code function.
retroarch Operating systems
Published September 12, 2018Updated September 16, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →