CVE-2022-47949

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code…

Critical · published December 24, 2022

CVSS v3.1
9.8
EPSS
23%
Percentile
97.8
In the wild
Unconfirmed
What it is

🚨 A single oversized UDP packet is all it takes to unleash chaos in your favorite Nintendo games! 🎮✨ Think of this vulnerability like an overstuffed package arriving at a hotel. Instead of accepting only the right-sized deliveries, the hotel could mistakenly accept this giant package, causing a mess in the lobby—items spilling everywhere and chaos ensuing! An attacker can execute arbitrary code when you join their game session, potentially taking full control of your console and data. This is absolutely devastating, as they could modify game behavior or even gain access to your personal information, all while you're just looking to have some fun!

Put simply

Think of this vulnerability like an overstuffed package arriving at a hotel. Instead of accepting only the right-sized deliveries, the hotel could mistakenly accept this giant package, causing a mess in the lobby—items spilling everywhere and chaos ensuing! This CVE involves a buffer overflow in the Nintendo NetworkBuffer class, allowing attackers to exploit vulnerable versions of various games by sending a crafted UDP packet that exceeds expected bounds.

What to do

An attacker can execute arbitrary code when you join their game session, potentially taking full control of your console and data. This is absolutely devastating, as they could modify game behavior or even gain access to your personal information, all while you're just looking to have some fun! Ensure you're using the latest versions of affected games: update Animal Crossing: New Horizons to 2.0.6, Mario Kart 8 Deluxe to 2.1.0, and others as specified. Always check for patches and install them promptly to protect your gaming experience! Don't worry, fellow gamer! Stay updated and you'll be gaming securely in no time! 🛡️🎉

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.23147 · 97.8th percentile
Published
2022-12-24T00:00Z
EPSS history
Timeline
  • 24 DEC 00:00Z
    The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code…
    cvelistv5