Nintendo built the 3DS to be unhackable, but a $5 puzzle game and a QR code proved them wrong
… Released by nedwill at 33C3 in December 2016, soundhax exploited a heap overflow in the Nintendo 3DS Sound app, the built-in music player that every single 3DS ships with. The vulnerability was in how the app parsed MP4 atom tags, specifically the Unicode string handling for song names. …