CVE-2026-82079

Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in Nintendo Switch Local Wireless Networking

Publication date: 2026-09-10

Last updated on: 2026-09-11

Assigner: 60e0823a-f1a8-4923-bd51-812de398c42c

Description

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-11

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-29

NVD

CVE-2026-82079

EUVD

EUVD-2026-75252

Affected Vendors & Products

Vendor	Product	Version / Range
nintendo	switch	to 23.0.0 (exc)
nintendo	switch_2	to 23.0.0 (exc)
nintendo	switch_lite	to 23.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in the Nintendo Switch's local wireless networking functionality. It allows an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) by sending specially crafted network traffic. The issue affects Nintendo Switch systems running versions before 23.0.0.

Detection Guidance

This vulnerability cannot be directly detected through standard network or system commands as it involves a stack-based buffer overflow in Nintendo Switch's local wireless networking. Detection would require monitoring for unusual network traffic patterns or crashes on affected Nintendo Switch devices running versions before 23.0.0.

Impact Analysis

An attacker within wireless range could exploit this flaw to run malicious code on your Nintendo Switch. This could lead to unauthorized access, data theft, or control over your device without physical access. The vulnerability specifically targets the local wireless networking feature.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability involves a stack-based buffer overflow in Nintendo Switch's local wireless networking, potentially allowing arbitrary code execution via crafted network traffic. No mention of data exposure, privacy violations, or regulatory implications is included.

Mitigation Strategies

Update your Nintendo Switch, Nintendo Switch 2, and Nintendo Switch Lite to the latest system version (23.0.0 or later) as recommended by Nintendo to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-82079. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70