Switch System Flaws: Difference between revisions
No edit summary |
m Flesh out detail on Splatoon 3 report based on HackerOne summary. |
||
| (One intermediate revision by one other user not shown) | |||
| Line 1,533: | Line 1,533: | ||
[https://hackerone.com/reports/3463719 HackerOne report] | [https://hackerone.com/reports/3463719 HackerOne report] | ||
This stack infoleak was also present in the [[LDN_services|ldn]] AdvertiseData. | |||
| A memory address can leaked (this is a requirement for many types of attacks). | | A memory address can leaked (this is a requirement for many types of attacks). | ||
| 1.5.0 | | 1.5.0 | ||
| December 12, 2025 | | December 12, 2025 | ||
| February 19, 2026 | | February 19, 2026 | ||
| [https://github.com/kinnay Yannik] | | [https://github.com/kinnay Yannik], yellows8 (ldn) | ||
|- | |- | ||
| Splatoon 3 | | Splatoon 3 | ||
| | | Anticheat Seed Randomization Weakness | ||
| This oversight of seed generation would allow an attacker to quickly compute all code hashes, and modify game code, while still producing a valid ch1 hash. | |||
| | |||
| | [https://hackerone.com/reports/3042475 HackerOne report] | ||
| | | Allows an attacker to bypass the ch1 anti-cheat hashing mechanism. | ||
| 10.0.0 | |||
| March 17, 2025 | |||
| February 19, 2026 | | February 19, 2026 | ||
| hana2736 | | hana2736 | ||
|} | |} | ||