CVE-2023-35856

A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's…

published June 19, 2023

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow in Mario Kart Wii could open the circuit for code execution via crafted packets! Who knew racing could be this risky? 🎮 Think of it like a mischievous player stuffing the wrong race blueprint into a high-speed kart, causing it to veer off course and crash into unexpected places! If exploited, an attacker could take the reins of a player's machine, executing malicious code at will. This could lead to serious problems, like data loss or worse, all while you're just trying to enjoy a fun race with friends!

Put simply

Think of it like a mischievous player stuffing the wrong race blueprint into a high-speed kart, causing it to veer off course and crash into unexpected places! This vulnerability arises from a buffer overflow in the RMCP01, RMCE01, RMCJ01, and RMCK01 components, allowing an attacker to send specially crafted packets to a game client that can overwrite memory and execute arbitrary code.

What to do

If exploited, an attacker could take the reins of a player's machine, executing malicious code at will. This could lead to serious problems, like data loss or worse, all while you're just trying to enjoy a fun race with friends! While there are no known exploits for this vulnerability yet, it’s wise to remain vigilant. Ensure your game is updated to the latest version, and keep an eye out for any patches released by Nintendo. You've got this! Stay ahead of the game and keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01149 · 66.6th percentile
Published
2023-06-19T00:00Z
EPSS history
Timeline
  • 19 JUN 00:00Z
    A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's…
    cvelistv5