{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-82079", "assignerOrgId": "60e0823a-f1a8-4923-bd51-812de398c42c", "state": "PUBLISHED", "assignerShortName": "Nintendo", "dateReserved": "2026-08-28T00:46:53.480Z", "datePublished": "2026-09-10T05:13:33.030Z", "dateUpdated": "2026-09-10T05:13:33.030Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "60e0823a-f1a8-4923-bd51-812de398c42c", "shortName": "Nintendo", "dateUpdated": "2026-09-10T05:13:33.030Z"}, "title": "Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack", "datePublic": "2026-09-10T05:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based buffer overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Nintendo", "product": "Nintendo Switch", "versions": [{"status": "affected", "version": "0", "lessThan": "23.0.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic.\nThis issue affects Nintendo Switch: before 23.0.0.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><span>A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic.<br></span><span>This issue affects Nintendo Switch: before 23.0.0.</span></p>"}]}], "references": [{"url": "https://www.nintendo.com/security-advisories/en/index.html"}], "workarounds": [{"lang": "en", "value": "If you cannot update to the latest system version right away, please note the following when using the system.\n\n\n\n\n\n * When using the \"Send to Smartphone\" feature in Album or when using a kart in Mario Kart Live: Home Circuit, please ensure that the QR code displayed on the console screen (or on the TV screen) cannot be viewed or scanned by third parties.\n * Please refrain from using the \"Send to Smartphone\" feature in Album with a smartphone other than your own, and from using a kart other than your own in Mario Kart Live: Home Circuit.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>If you cannot update to the latest system version right away, please note the following when using the system.</p><p></p><ul><li><span>When using the \"Send to Smartphone\" feature in Album or when using a kart in Mario Kart Live: Home Circuit, please ensure that the QR code displayed on the console screen (or on the TV screen) cannot be viewed or scanned by third parties.</span></li><li><span>Please refrain from using the \"Send to Smartphone\" feature in Album with a smartphone other than your own, and from using a kart other than your own in Mario Kart Live: Home Circuit.</span></li></ul><p></p>"}]}], "solutions": [{"lang": "en", "value": "Perform System Update 23.0.0.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Perform System Update 23.0.0.</p>"}]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Nintendo Switch", "vendor": "Nintendo", "versions": [{"lessThan": "23.0.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "60e0823a-f1a8-4923-bd51-812de398c42c"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic.\nThis issue affects Nintendo Switch: before 23.0.0."}], "id": "CVE-2026-82079", "lastModified": "2026-09-10T06:17:06.330", "metrics": {}, "published": "2026-09-10T06:17:06.330", "references": [{"source": "60e0823a-f1a8-4923-bd51-812de398c42c", "url": "https://www.nintendo.com/security-advisories/en/index.html"}], "sourceIdentifier": "60e0823a-f1a8-4923-bd51-812de398c42c", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "60e0823a-f1a8-4923-bd51-812de398c42c", "type": "Secondary"}]}

{}