The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons prior to 2.0.6 and other products, allows remote malicious users to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 prior to 1.2, Mario Kart 8, Mario Kart 8 Deluxe prior to 2.1.0, ARMS prior to 5.4.1, Splatoon, Splatoon 2 prior to 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 prior to 3.0.2, and Nintendo Switch Sports before late 2022.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
nintendo splatoon 2 |
||
nintendo super mario maker 2 |
||
nintendo splatoon |
||
nintendo splatoon 3 |
||
nintendo switch sports |
||
nintendo arms |
||
nintendo animal crossing\\ _new_horizons |
||
nintendo mario kart 8 - |
||
nintendo mario kart 8 |
||
nintendo mario kart 7 |
Vulmon