{"id":"CVE-2026-82079","title":"Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack","summary":"A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted netw…","severity":"high","cvss":7,"cvssVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-121"],"vendor":"Nintendo","product":"Nintendo Switch","affected":["switch < 23.0.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-10T00:00:00+00:00"},"published":"2026-09-10","updated":"2026-09-11","sourceUpdated":"2026-09-11T03:56:09.883Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-82079","references":[{"url":"https://www.nintendo.com/security-advisories/en/index.html"}],"tags":["cve.org"],"epss":0.00159,"epssPercentile":0.0542,"ingestedAt":"2026-09-11T16:45:47.926Z","slug":"CVE-2026-82079","body":"## Overview\n\nA stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic.\nThis issue affects Nintendo Switch: before 23.0.0.\n\n## Affected\n\n- `switch < 23.0.0`\n\n## Remediation\n\nPerform System Update 23.0.0.\n\n### Workarounds\n\nIf you cannot update to the latest system version right away, please note the following when using the system.\n\n\n\n\n\n  *  When using the \"Send to Smartphone\" feature in Album or when using a kart in Mario Kart Live: Home Circuit, please ensure that the QR code displayed on the console screen (or on the TV screen) cannot be viewed or scanned by third parties.\n  *  Please refrain from using the \"Send to Smartphone\" feature in Album with a smartphone other than your own, and from using a kart other than your own in Mario Kart Live: Home Circuit.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":49635,"id":"CVE-2026-82079","ts":1789055635593,"field":"cvss","old":null,"new":"8.4"},{"seq":49634,"id":"CVE-2026-82079","ts":1789055635593,"field":"severity","old":"none","new":"high"}]}