Switch 2: first exploit found on launch day
Nintendo Switch 2 has gone on sale, and hackers found a way to execute code in user space on the very first day. Researcher @retr0.id published a demonstration of a userland exploit based on ROP (Return-Oriented Programming) — a vulnerability that works in user space without kernel access or system privileges. It was used to draw graphics to the screen through the framebuffer.
This exploit does not allow running pirated games, installing homebrew, or executing arbitrary native code. It is limited to the space of a normal application with no administrator privileges.
Even so, it is an excellent starting point: full hacks of the 3DS, Wii U, and original Switch all began with userland vulnerabilities like this. Even partial control over code execution creates opportunities to analyze the system, find new holes, and bypass protections.
“To be clear, this is a userland exploit not native code exec, but this is how it starts.”
— @ModernVintageG
There is no practical use for the exploit yet, but if researchers keep digging in this direction, deeper system access may only be a matter of time. From there, custom firmware or overclocking would not be far behind — just as happened with the original Switch.