The launch week of Nintendo Switch 2 has been marked by significant activity in the hacking community, underscoring the continuous cat-and-mouse game between manufacturers and determined security researchers. Despite initial claims that Nintendo’s latest console would be ‘unhackable’ due to robust anti-tampering and fault injection measures, the rapid demonstration of vulnerabilities suggests otherwise.
Security researcher David Buchanan made headlines by achieving userland code execution on the Switch 2 within 24-48 hours of its release. Utilizing Return-Oriented Programming (ROP) chains, Buchanan managed to write to the frame buffer, demonstrating a vulnerability that, while not a full jailbreak, offers a foothold for further exploration. This achievement highlights the complex security landscape created by the ARM TrustZone architecture used in the device, which requires separate compromises to access kernel or secure world domains.
Adding to the week’s revelations was the discovery of factory debug firmware on some retail units, offering another possible avenue for exploration by the hacking community. Additionally, earlier claims regarding the compatibility of the Mig Switch piracy device were debunked, suggesting a more intricate path for potential device exploitation.
Buchanan’s exploit appears to leverage the Switch 1 compatibility layer, suggesting Nintendo’s efforts to ensure backward compatibility might inadvertently open doors for exploitation. Evidence of this included access to internal library names such as nnCompatTrampoline.
These early breakthroughs indicate that, no matter the sophistication of security measures, vulnerabilities in consumer devices are often an inevitable discovery for skilled hackers. The journey from the current usermode exploits to deeper system access may be gradual, but the aggressive pursuit suggests further developments could be imminent.

Collections

Security researchers have already discovered vulnerabilities in the Nintendo Switch 2 within days of its launch, despite Nintendo's claims of enhanced security. David Buchanan achieved userland code execution using Return-Oriented Programming chains and exploited the backward compatibility layer with the original Switch. Additional discoveries include factory debug firmware on retail units and evidence that the ARM TrustZone architecture creates multiple security domains that need separate compromises for full system access.

Early Vulnerabilities Revealed in Nintendo Switch 2 Amid Launch Week