Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow
CVE-2022-3349

6.8MEDIUM

Key Information:

Vendor

Sony

Status
Ps4
Ps5
Vendor
CVE Published:
28 September 2022

What is CVE-2022-3349?

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PS4

PS5

References

https://hackerone.com/reports/1340942
x_refsource_MISC
https://vuldb.com/?id.209679
x_refsource_MISC

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andy Nguyen
JSON
.