Nintendo vulnerabilities
We track 7 vulnerabilities in Nintendo products across 16 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.
Latest Nintendo vulnerabilities
- 7.0 High severity
Nintendo Switch: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic. This issue
- 7.4 High severity
wii_u: Improper Privilege Management
Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA, because there is a secondary verification mechanism that only checks whether a CA is known and ignores the CA details and signature (and be
- 9.8 Critical severity
Mario Kart Wii: Buffer Copy without Checking Size of Input
A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.
- 9.8 Critical severity
Animal Crossing: Buffer Copy without Checking Size of Input
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game se
- 8.8 High severity
Game Boy Color: Uncontrolled Recursion
A vulnerability has been found in Nintendo Game Boy Color and classified as problematic. This vulnerability affects unknown code of the component Mobile Adapter GB. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit
- 7.2 High severity
Nintendo Wi-Fi Network Adaptor WAP-001: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.
- 7.2 High severity
Nintendo Wi-Fi Network Adaptor WAP-001: Buffer Copy without Checking Size of Input
Buffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an attacker with an administrative privilege to execute arbitrary code via unspecified vectors.