The Patching Friars' AlmanacA calendar of CVE saints

Patron of December 22

ENLBufferPwnHoly card for enlbufferpwn, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 UDP #### ENLBufferPwn LUDUS FRACTUS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint ENLBufferPwn, Who Ruined the Online Match

Patron of online players, Nintendo consoles, and network buffers that don't check their size.

Life

On 22 December 2022 the researchers PabloMK7, Rambo6Glaz and Fishguy6564 published, with Nintendo's permission, ENLBufferPwn: an overflow in the NetworkBuffer class used in many titles, from Animal Crossing: New Horizons to Mario Kart 8 Deluxe and Splatoon. Anyone sharing an online session with the victim had only to send an oversized UDP packet to run code on their console. Nintendo updated the affected games.

Prayer

O Saint ENLBufferPwn, who turns a match into code execution, let our buffers measure before they take things in. Amen.

How to celebrate

Celebrated by updating Nintendo games to the latest version before accepting a stranger's invitation.

An oversized packet makes for a short match.

Technical record

Disclosed on
December 22 2022
CVE
CVE-2022-47949
CVSS
9.8

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022.

Sources: github.com

Canonized by Pope Follina I

Related saints

Sharing the feast day

The “pwn” family

Same year: 2022

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.