Nintendo · disclosed reports
Memory Corruption
9 disclosed reports · $0 paid · 7 valid · 2 duplicate
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. A report opens its page here: our analysis where there is one, and the link to HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.
Open Nintendo on HackerOne- reports
- 9
- valid
- 7
- paid a bounty
- 0
Every one of the 9 is a mark on the map. Named now: 1 to 9, most upvoted first.
- [3DS][SSL][SDK] Unchecked number of audio channels in Mobiclip SDK leads to RCE in eShop movie player
- [Wii U/3DS/Switch] Improper bounds check in StationURL in all NEX clients leading to remote crash/RCE
- [3DS][SSL] Use of uninitialized class member leads to RCE in eShop movie player
- [Switch, PIA/MK8DX] Stack buffer overflow and potential RCE in PIA (LAN/LDN, possibly NEX) room info deserialization
- [MK8DX] Improper ranking/replay file parsing
- [Switch] Remote stack buffer overflow in the LDN/LP2P DHCP server leads to control-flow hijack
- [3DS][StreetPass] Heap Overflow in Swapnote parser leads to userland StreetPass RCE
- [3DS][StreetPass] Buffer Overflow in Super Mario Maker level decompression
- NEX: Stack overflow in UnicodeToUtf8
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.