New Switch 2 jailbreak allows hackers to run homebrew and modify games

A recent report from a media source highlights a significant breakthrough in video game console security, specifically involving the newly released Switch 2. A security researcher has successfully demonstrated a software-only partial jailbreak of this device, achieving “userland” access. This advancement permits users to run homebrew applications, reverse engineer and modify Switch 2 games, back up saved files, and interact with most of the console’s peripherals through memory-mapped I/O (MMIO).

The exploit leverages the original version of SmileBasic 4, a programming environment that has been a staple in Nintendo’s developer ecosystem. This “tethered” hack necessitates access to a macOS or Linux PC connected to the same network, enabling the execution of a node.js package that facilitates elevated system access.

The researcher, known online as Pepsipu, detailed his process on a personal blog where he elaborated on the technical aspects of the hack. He utilized OpenAI’s Codex to investigate SmileBasic’s language interpreter, which he paired with a custom setup designed to send USB commands to the console and receive results displayed via HDMI. After approximately two weeks of intensive work, Pepsipu discovered a 32-bit integer overflow vulnerability occurring during the deletion of items from an array within SmileBasic. This flaw granted him access to an array pointer, subsequently allowing read-and-write capabilities for specific segments of system memory.

Pepsipu continued his exploration, seeking further avenues to access the Switch 2’s internal system modules. His efforts ultimately led him to a buffer overflow in the console’s FileSystem services, which exposed a data pointer that allowed for unrestricted read-and-write privileges. This breakthrough enabled him to execute privileged filesystem operations and, eventually, native code execution by simulating a filesystem process.

As proof of concept, Pepsipu showcased a range of newly modded characters in “Mario Kart World,” demonstrating the capabilities enabled by this jailbreak. Other developers have begun sharing their own experiments and emerging tools on platforms dedicated to the Switch 2 community.

Such developments raise important considerations regarding console security and the potential implications for the gaming industry, particularly as enthusiasts explore the boundaries of creative game modifications and user-generated content.

#technology #entertainment