CVE-2022-3349

MEDIUM

Sony PlayStation 4 and 5 Firmware - Heap-Based Buffer Overflow in exFAT Handler

Title source: llm

Description

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.

References (2)

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

https://hackerone.com/reports/1340942

Permissions Required, Third Party Advisory x_refsource_misc

https://vuldb.com/?id.209679

Scores

CVSS v3 6.8

EPSS 0.0050

EPSS Percentile 38.9%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-119 CWE-787

Status published

Products (2)

sony/playstation_4_firmware

sony/playstation_5_firmware

Published Sep 28, 2022

Tracked Since Feb 18, 2026