Filtered by vendor Libretro Subscriptions
Filtered by product Retroarch Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-0459 1 Libretro 1 Retroarch 2025-01-14 5.3 Medium
A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll of the component Startup. The manipulation leads to untrusted search path. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2021-28927 2 Libretro, Microsoft 2 Retroarch, Windows 2024-11-21 7.8 High
The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platform_win32.c via the accessibility_speak_windows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection using specially a crafted file and directory names.