Read the docs
TI-2026-56643 Aliases CVE-2026-82079GHSA-ccj4-6gq7-582f

Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack

Priority LOW 32CWE-121Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · High · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00255 17th percentileScored 2026-11-07
Fix Fixed Nintendo Switch (Nintendo): 23.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NintendoNintendo Switchbefore 23.0.023.0.0Patch availableCNA
  • Nintendo Switch VendorNintendo Affected before 23.0.0 Fixed in 23.0.0 Patch available CNA

Remediation

  • Fix · CNA Nintendo Switch (Nintendo) Fixed in 23.0.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-82079
  2. 2026-10-03 Alias added: GHSA-ccj4-6gq7-582f

References

Other 1

  • TI-2022-23760 The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6… CVSS 3.1CRITICAL 9.8
  • TI-2022-02971 Nintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption CVSS 3.1HIGH 8.8
  • TI-2018-15335 Nintendo Animal Crossing Letter Trigram ac-exploit-gc memory corruption CVSS 4.0MEDIUM 5.4
  • TI-2023-17931 A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be… CVSS 3.1CRITICAL 9.8
  • TI-2023-24638 DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote… CVSS 3.1CRITICAL 9.8
  • TI-2022-16720 OS command injection in Nintendo Wi-Fi Network Adaptor WAP-001 CVSS 3.1HIGH 7.2
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences