Switch 2 security takes a hit as hackers unlock homebrew access
Key Points:
- Security researcher Sammy Hajhamid demonstrated a software-only partial jailbreak of the Switch 2, achieving userland access that enables running homebrew, modding games, backing up save files, and accessing peripherals via MMIO.
- The exploit leverages a 32-bit integer overflow in SmileBasic 4, a programming environment removed from the Switch eShop, combined with a buffer overflow in the console’s FileSystem services to gain arbitrary read/write privileges and native code execution.
- This "tethered" hack requires a macOS or Linux PC on the same network and remains limited to userland access, falling short of kernel-level control necessary for full hardware access.
- Nintendo's removal of SmileBasic 4 from the eShop may slow the exploit’s spread, but similar vulnerabilities using other games are being explored, and the current exploit is expected to be patched in upcoming firmware updates.
- While less severe than the original Switch’s unpatchable hardware exploit from 2018, the rapid development of Switch 2 hacks highlights ongoing challenges for Nintendo in securing its console software.