48
edits
Changes
Jump to navigation
Jump to search
→Non-system applications
Line 82:
Line 82:
| slackerSnail, 12Me12, incvoid
| slackerSnail, 12Me12, incvoid
Exploited by MrNbaYoh and [[User:Plutooo|plutoo]].
Exploited by MrNbaYoh and [[User:Plutooo|plutoo]].
+|-
+| SmileBASIC 3.x
+| Subscripted TIME$/DATE$ allow write access to DATA/BSS
+| Utf-16 characters can be assigned to subscripted TIME$/DATE$ interpreter sysvars which results in write-only access to all of DATA and some BSS in userland.
+TIME$[0]/DATE$[0] actually point to somewhere in rodata, and an overly large subscript can be used to write well past it and into the aforementioned areas.
+| App: 3.6.2 (3.6.0 latest for US/EU, JP appvers. can be downgraded)
+| System: [[11.13.0-45]].
+| April 2020
+| February 2020
+| bug publicly documented [https://translate.google.com/translate?sl=auto&tl=en&u=http%3A%2F%2Fsmilebasic.com%2Fdebug%2Farchive%2F here]
+Exploited by Zoogie
|-
|-
| The Legend of Zelda: Tri Force Heroes
| The Legend of Zelda: Tri Force Heroes