CVE-2026-82079

Name of the Vulnerable Software and Affected Versions Nintendo Switch versions prior to 23.0.0

Description A stack-based buffer overflow exists in the local wireless networking functionality. An attacker within wireless range can execute arbitrary code using return-oriented programming (ROP) by sending crafted network traffic. The attack is triggered when a victim uses specific sharing workflows involving QR codes, such as the Album Send to Smartphone feature or Mario Kart Live: Home Circuit smartphone functionality. A malicious device joins the temporary local network after a QR code is scanned, leading to memory corruption that may compromise confidentiality, integrity, and availability, potentially allowing unauthorized code execution or information access.

Recommendations Update Nintendo Switch to version 23.0.0 or later. Avoid showing generated QR codes to untrusted individuals and limit the use of QR-code sharing features to trusted devices.