10
Dolphin Progress Report: Release 2609 Nintendo GameCube/Wii Emulation (dolphin-emu.org)
submitted 1 month ago by to c/emulation@sh.itjust.works
1 comment fedilink hide all child comments
 

On August 8, the attacker compromised our macOS build machine through the Screen Sharing vulnerability. The observed payload was the same Monero cryptominer found on other affected machines. We believe that this attack was not targeted specifically towards Dolphin, as all indicators of compromise matched other machines infected with the cryptominer, and we did not observe any indications of data exfiltration or other payloads on the machine.

We eventually noticed that the machine was compromised on August 15 and shut it down. Because we were unaware that there was malware on the machine from August 8 to 15, we were using it during that period of time to produce new builds of Dolphin. This includes development versions between 2606-294 and 2606-302, as well as the 2606a hotfix release. Since the attacker had full control over the machine when these builds were produced, we became very concerned over the possibility that they could have been infected with malware.

Thankfully, after manually analyzing the contents of each build, we can report that none of the builds appear to be compromised with any malware. We also ran each build through VirusTotal and found no evidence of anything suspicious. However, if you are running any of these macOS builds, we recommend that users should update to the latest development or release version, out of an abundance of caution. We would also like to reiterate that only our macOS build machine was compromised during this incident, so users on Windows, Android, and Linux are unaffected.

other discussions
9
Dolphin (NGC/Wii) Progress Report Update? 2609b... fixed Dolphin crashing in Alberta, Canada! Nintendo GameCube/Wii Emulation (dolphin-emu.org)
submitted 6 hours ago by to c/emulation@sh.itjust.works
comment fedilink hide all child comments
 
We released Dolphin 2609b on 7 November 2026. You can find the full change log below.  

    Fixed an issue which causes Dolphin to crash on Windows if the time zone is set to "Mountain Time (Alberta)" or "Pacific Time (British Columbia)".  
        In older versions of Dolphin, this crash can be avoided by temporarily changing the time zone to "Mountain Time (US or Canada)" or "Pacific Time (US or Canada)".  
    Fixed an issue where colors are corrupted on Adreno GPUs when using driver versions 0.7xx.xx+.  
    Fixed an issue where adjusting any slider control on Windows and macOS can cause Dolphin to crash.  
    Fixed an issue where Dolphin on macOS did not support any UI languages other than English due to missing translation files.  
    Fixed an issue where loading a corrupted graphics mod can cause Dolphin to crash.  
    Fixed an issue where Driver: San Francisco can freeze during loading screens.  
        We added a patch in 2509-519 to cap this game's frame rate (for more information, refer to the Dolphin Progress Report: Release 2512).  
        Unfortunately, this game contains the MetaFortress anti-piracy system, which detects the patch and determines that the game has been tampered with.  
        We have decided to remove the patch temporarily so that the game can at least function.  

Here are the security patches in this hotfix release.  

    Fixed an issue where loading a maliciously crafted LZO-compressed save state file can cause Dolphin to write beyond the boundaries of a buffer.  
    Fixed an issue where loading a maliciously crafted FIFO log can cause Dolphin to write beyond the boundaries of a buffer.  

Hotfix Release 2609a  

We released Dolphin 2609a on 7 October 2026. You can find the full change log below.  

    Added a prompt on Android to request permission for local network access while using NetPlay.  
        This permission is not required if you only want to play with others over the internet.  
    Approved additional codes and patches in various games for use with RetroAchievements in hardcore mode.  
    Fixed an issue on Google Play where Dolphin was accidentally listed as compatible with 32-bit ARM devices.  
        32-bit ARM support was removed in 2015. We have no plans to re-introduce support.  
    Fixed a bug which caused the settings menu to crash on Android 9.0 (Pie) and older.  
    Fixed a bug where a GameCube controller plugged into port 1 of a GameCube Controller Adapter did not work in NetPlay.  
    Fixed a bug which could cause games to crash at boot on macOS.  

Here are the security patches in this hotfix release.  

    Fixed a bug where attempting to assemble certain syntactically invalid source causes Dolphin to crash.  
    Fixed a bug where a malicious NetPlay host could cause clients in a room to reserve an excessive amount of RAM.  
    Fixed a bug where a malicious NetPlay host could cause clients in a room to write part of their memory into a file on the Wii NAND.  
    Fixed a bug where a maliciously crafted save state could cause Dolphin to write outside of a buffer when loaded.