Editing Vulnerabilities
Jump to navigation
Jump to search
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 54: | Line 54: | ||
Contrarly to PS4, on PS5 this exploit does not allow arbitrary usermode memory RW because of PS5 memory protections. However thanks to tricks it is possible to get usermode ROP code execution from this exploit. | Contrarly to PS4, on PS5 this exploit does not allow arbitrary usermode memory RW because of PS5 memory protections. However thanks to tricks it is possible to get usermode ROP code execution from this exploit. | ||
See also [https://www.psdevwiki.com/ps4/ | See also [https://www.psdevwiki.com/ps4/Working_Exploits#FW_9.00-9.04_-_WebCore::CSSFontFaceSet_vulnerabilities_leading_to_arbitrary_RW]. | ||
==== Implementations ==== | ==== Implementations ==== | ||
Line 72: | Line 72: | ||
=== PS2 games savedata exploits === | === PS2 games savedata exploits === | ||
See [https://www.psdevwiki.com/ps4/ | See [https://www.psdevwiki.com/ps4/Working_Exploits#Usermode_Exploits_.28Game_Savedata.29]. | ||
=== PS4/PS5 PS2emu sandbox escape (mast1c0re) === | === PS4/PS5 PS2emu sandbox escape (mast1c0re) === | ||
See [https://www.psdevwiki.com/ps4/ | See [https://www.psdevwiki.com/ps4/Working_Exploits#PS4.2FPS5_PS2emu_sandbox_escape_.28mast1c0re.29]. | ||
== PS4 emulator exploits == | == PS4 emulator exploits == | ||
Line 157: | Line 157: | ||
== SMAP bypass (CVE-2021-29628) == | == SMAP bypass (CVE-2021-29628) == | ||
See also [https://www.psdevwiki.com/ps4/ | See also [https://www.psdevwiki.com/ps4/Working_Exploits#Kernel_SMAP]. | ||
=== Credits === | === Credits === | ||
Line 181: | Line 181: | ||
== Untested: Partial SAMU KeyRings bruteforce by missing HMAC length check in secure kernel == | == Untested: Partial SAMU KeyRings bruteforce by missing HMAC length check in secure kernel == | ||
See [https://www.psdevwiki.com/ps4/ | See [https://www.psdevwiki.com/ps4/Bugs_%26_Vulnerabilities#Partial_SAMU_KeyRings_bruteforce_by_missing_HMAC_length_check_in_secure_kernel]. | ||
Potentially vulnerable on PS5 FWs <= 4.03. | Potentially vulnerable on PS5 FWs <= 4.03. |