Browse / Nintendo

Nintendo

See its reports on the map

What gets reported to Nintendo

• Memory Corruption9
• Access Control5
• Cryptography3
• Information Disclosure1
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacksImproper Certificate Validation
   129 votes
2. ASLR leak in Mario Kart World through LAN modeInformation Disclosure · high
   74 votes
3. [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyResource Injection · critical
   65 votes
4. Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionClient-Side Enforcement of Server-Side Security · high
   62 votes
5. Splatoon 3 Anticheat Seed Randomization WeaknessUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
   55 votes
6. Man-in-the-middle through broken SSL certificate verificationMan-in-the-Middle · medium
   53 votes
7. [3DS][SSL][SDK] Unchecked number of audio channels in Mobiclip SDK leads to RCE in eShop movie playerHeap Overflow
   43 votes
8. [Xenoblade Chronicles X: Definitive Edition] Improper validation of names allows injecting formatting tags and bypassing profanity filterImproper Access Control - Generic · medium
   40 votes
9. Arbitrary code execution in TSEC Heavy Secure, return-oriented programming in TSEC Secure ROM, and recovery of TSEC-derived cryptographic secretsPrivilege Escalation · medium
   38 votes
10. [3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie playerUse After Free
    38 votes
11. [Splatoon 3] Kick other players with NplnLogin messageImproper Access Control - Generic · medium
    37 votes
12. [Switch, PIA/MK8DX] Stack buffer overflow and potential RCE in PIA (LAN/LDN, possibly NEX) room info deserializationStack Overflow · medium
    36 votes
13. [MK8DX] Improper ranking/replay file parsingMemory Corruption - Generic · critical
    36 votes
14. [Switch] Remote stack buffer overflow in the LDN/LP2P DHCP server leads to control-flow hijackStack Overflow · high
    35 votes
15. [3DS][StreetPass] Heap Overflow in Swapnote parser leads to userland StreetPass RCEHeap Overflow
    30 votes
16. [3DS][StreetPass] Buffer Overflow in Super Mario Maker level decompressionHeap Overflow
    30 votes
17. [MK8DX] Improper verification of Competition creation allows to create "Official" competitionsImproper Access Control - Generic · high
    23 votes