PT-2025-3895 · Libretro · Retroarch

Havook · Published 2025-01-14 · Updated 2025-01-18 · CVE-2025-0459

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions libretro RetroArch versions up to 1.19.1

Description A problematic issue has been found in the library profapi.dll of the component Startup, leading to an untrusted search path. The manipulation requires a local attack approach. The vendor was contacted about this disclosure but did not respond.

Recommendations For versions up to 1.19.1, as a temporary workaround, consider restricting access to the profapi.dll library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2025-0459

Affected Products

Retroarch

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-0459 · Security Note
• https://vuldb.com/?ctiid.291476 · Note
• https://vuldb.com/?submit.474011 · Note
• https://vuldb.com/?id.291476 · Note
• https://t.me/cvedetector/15292 · Telegram Post
• https://twitter.com/CVEnew/status/1880761236578574630 · Twitter Post