Key facts
- The Switch 2 jailbreak grants userland access for homebrew, game modding, and save file backups.
- The exploit targets a 32-bit integer overflow in the SmileBasic 4 interpreter.
- Arbitrary read and write privileges were obtained through a buffer overflow in the FileSystem services module.
- Nintendo has delisted SmileBasic 4 from its eShop worldwide.
A security researcher has demonstrated a software-only partial jailbreak of the Switch 2, achieving userland access that allows for running homebrew applications, reverse engineering, and modding games. The exploit, detailed by researcher Sammy Hajhamid, targets a 32-bit integer overflow discovered in the SmileBasic 4 programming environment's interpreter. This vulnerability grants read and write access to system memory, enabling native code execution. As a proof of concept, Hajhamid showcased modded characters in Mario Kart World. Nintendo has since delisted SmileBasic 4 from its eShop worldwide, a move similar to what occurred with the 3DS version after a related exploit in 2016. While the current exploit is limited to userland access and falls short of full kernel-level control, other similar exploits are reportedly being teased by the Switch 2 hacking community.