Summaryinfo

A vulnerability was found in Sony PS4 and PS5. It has been declared as critical. This vulnerability affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based overflow. This vulnerability was named CVE-2022-3349. It is possible to launch the attack on the physical device. Furthermore, there is an exploit available. It is recommended to upgrade the affected component. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Detailsinfo

A vulnerability was found in Sony PS4 and PS5 (Game Console) (affected version unknown). It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength with an unknown input leads to a heap-based overflow vulnerability. CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). This is going to have an impact on confidentiality, integrity, and availability.

The weakness was shared 09/28/2022 by Andy Nguyen as #1340942. It is possible to read the advisory at hackerone.com. This vulnerability is uniquely identified as CVE-2022-3349. Technical details and a exploit are known.

It is declared as proof-of-concept.

Upgrading eliminates this vulnerability. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Game Console

Vendor

• Sony

Name

• PS4
• PS5

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion