A vulnerability classified as problematic has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function
filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read.
This vulnerability is registered as CVE-2025-9136. The attack needs to be launched locally. No exploit is available.
It is recommended to upgrade the affected component.
