CVE-2025-0459: libretro RetroArch Startup profapi.dll untrusted search path
Description
A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll of the component Startup. The manipulation leads to untrusted search path. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way. Eine problematische Schwachstelle wurde in libretro RetroArch bis 1.19.1 für Windows entdeckt. Es geht hierbei um eine nicht näher spezifizierte Funktion in der Bibliothek profapi.dll der Komponente Startup. Durch das Beeinflussen mit unbekannten Daten kann eine untrusted search path-Schwachstelle ausgenutzt werden. Der Angriff muss lokal passieren.
Classification
CVE ID: CVE-2025-0459
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.8
Affected Products
Vendor: libretro
Product: RetroArch
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 17.78% (scored less or equal to compared to others)
EPSS Date: 2025-02-12 (when was this score calculated)
References
https://vuldb.com/?id.291476https://vuldb.com/?ctiid.291476
https://vuldb.com/?submit.474011