diff --git a/src/core/services/apt.cpp b/src/core/services/apt.cpp
index 1cdebc88..814b034c 100644
--- a/src/core/services/apt.cpp
+++ b/src/core/services/apt.cpp
@@ -97,7 +97,7 @@ void APTService::appletUtility(u32 messagePointer) {
 	log("APT::AppletUtility(utility = %d, input size = %x, output size = %x, inputPointer = %08X) (Stubbed)\n", utility, inputSize,
 		outputSize, inputPointer);
 
-	const u32 outputBuffer = messagePointer + 0x104;
+	const u32 outputBuffer = mem.read32(messagePointer + 0x104);
 	if (outputSize >= 1 && utility == 6) {
 		// TryLockTransition expects a bool indicating success in the output buffer. Set it to true to avoid games panicking (Thanks to Citra)
 		mem.write8(outputBuffer, true);