Description (CNA)
Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fixed-size buffer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| libretro / libretro-common | affected 0 |
CWE
CWE-787
References
- https://github.com/libretro/libretro-common/blob/master/formats/cdfs/cdfs.c#L471
- https://github.com/libretro/libretro-common/issues/222
ADP enrichment
No English description supplied.
No references supplied.