https://switchbrew.org/w/api.php?action=feedcontributions&feedformat=atom&user=Aurora+WrightNintendo Switch Brew - User contributions [en]2026-05-04T10:22:35ZUser contributionsMediaWiki 1.43.1https://switchbrew.org/w/index.php?title=Switch_System_Flaws&diff=963Switch System Flaws2017-06-20T12:43:07Z<p>Aurora Wright: </p>
<hr />
<div><br />
System Flaws are used to execute unofficial code (homebrew) on the Nintendo Switch. This page is a list of known and public Switch System Flaws.<br />
<br />
=List of Switch System Flaws=<br />
<br />
== Hardware == <br />
{| class="wikitable" border="1"<br />
! Summary<br />
! Description<br />
! Fixed with hardware model/revision<br />
! Newest hardware model/revision this flaw was checked for<br />
! Timeframe this was discovered<br />
! Discovered by<br />
|-<br />
| No public hardware exploits <br />
|<br />
|<br />
|<br />
|<br />
|<br />
|-<br />
|}<br />
==ARM TrustZone software==<br />
===ARM TrustZone===<br />
{| class="wikitable" border="1"<br />
|-<br />
! Summary<br />
! Description<br />
! Successful exploitation result<br />
! Fixed in system version<br />
! Last system version this flaw was checked for<br />
! Timeframe this was discovered<br />
! Public disclosure timeframe<br />
! Discovered by<br />
|-<br />
| No public ARM TrustZone exploits <br />
|<br />
|<br />
|<br />
|<br />
|<br />
|<br />
|<br />
|-<br />
|}<br />
== Kernel software==<br />
===Kernel===<br />
{| class="wikitable" border="1"<br />
|-<br />
! Summary<br />
! Description<br />
! Successful exploitation result<br />
! Fixed in system version<br />
! Last system version this flaw was checked for<br />
! Timeframe this was discovered<br />
! Public disclosure timeframe<br />
! Discovered by<br />
|-<br />
| No public Kernel exploits <br />
|<br />
|<br />
|<br />
|<br />
|<br />
|<br />
|<br />
|-<br />
|}<br />
<br />
===System Modules===<br />
{| class="wikitable" border="1"<br />
|-<br />
! Summary<br />
! Description<br />
! Successful exploitation result<br />
! Fixed in system version<br />
! Last system version this flaw was checked for<br />
! Timeframe this was discovered<br />
! Public disclosure timeframe<br />
! Discovered by<br />
|-<br />
| OOB Read in NS system module (pl:utoohax, pl:utonium, maybe other names)<br />
| Prior to [[3.0.0]], pl:u (Shared Font services implemented in the NS sysmodule) service commands 1,2,3 took in a signed 32-bit index and returned that index of an array but did not check that index at all. This allowed for an arbitrary read within a 34-bit range (33-bit signed) from pl:u .bss. In [[3.0.0]], sending out of range indexes causes error code 0x60A to be returned.<br />
| Dumping pl:u (part of the the NS module)'s virtual memory (including code); obtaining base addresses for NS module .text (thus defeating ASLR)<br />
| [[3.0.0]]<br />
| [[3.0.0]]<br />
| April 2017<br />
| On exploit's fix in [[3.0.0]]<br />
| qlutoo, Reswitched team (independently)<br />
|-<br />
|}</div>Aurora Wright