Difference between revisions of "Switch Userland Flaws"

Latest revision as of 18:16, 10 November 2022

Redirect to:

@@ Line 1: / Line 1: @@
-This page lists vulnerabilities / exploits for Nintendo Switch applications and applets.
+#REDIRECT [[Switch_System_Flaws]]
-== Browser userspace ==
-{| class="wikitable" border="1"
-!  Summary
-!  Description
-!  Fixed with software update
-!  Newest software update this flaw was checked for
-!  Timeframe this was discovered
-!  Discovered by
-|-
-| CVE-2016-4657
-| WebKit vuln discovered around August 2016. Most notably used in the iOS 9.3.X exploit. A simple PoC can be found [https://github.com/LiveOverflow/lo_nintendoswitch/blob/master/poc1.html here]. This was later exploited by [https://twitter.com/qwertyoruiopz Qwertyoruiop] using an adjusted version of his iOS 9.3 webkit exploit (others exploited this prior to then).
-| [[2.1.0]]
-| [[2.0.0]]
-| Original: August 2016
-Switch: March 3rd-4th 2017
-| Everyone
-|-
-| CVE-2017-7005
-| WebKit type confusion.
-| [[3.0.1]]
-| [[3.0.1]]
-|
-| Everyone
-|-
-| CVE-2016-4622
-| WebKit memory corruption bug. This bug was incorrectly re-introduced in [[4.0.0]]. See [http://www.phrack.org/papers/attacking_javascript_engines.html here] for a detailed write-up from the author.
-| [[6.1.0]]
-| [[6.1.0]]
-|
-| Everyone
-|-
-| CVE-2018-4441
-| WebKit memory corruption bug. See [https://bugs.chromium.org/p/project-zero/issues/detail?id=1685&desc=2 here].
-| [[7.0.0]]
-| [[7.0.0]]
-|
-| Everyone
-|}