CVE-2023-35856: Nintendo Mario Kart Wii

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machine via a crafted packet.

Affected products

• Nintendo Mario Kart Wii: version rmce01 only; version rmcj01 only; version rmck01 only; version rmcp01 only

Published 2023-06-19. Last modified 2026-06-17.