In the network was published detailed information about a new exploit that allows installing custom software on the PlayStation 4 console with relatively recent firmware. Apparently, similar features may soon appear on some versions of the PlayStation 5.
The new exploit is based on a known bug in WebKit on PS4 and related to the use of font-faces. The exploit for PS4 was made public back in October as a proof-of-concept, after a similar bug was discovered in Apple’s Safari WebKit implementation in September.The well-known console cracker Specter posted a video of the exploit over the weekend. By Monday, the files required for the exploit to work had already been uploaded to GitHub, along with detailed instructions.
9.👀 (awesome work by chendochap & @Znullptr) pic.twitter.com/ME12bLyu3C
— Specter (@SpecterDev) December 13, 2021
ArsTechnica magazine writes that a full-fledged exploit can be launched on PS4 by simply opening a website with specially prepared JavaScript in the console browser, which will allow the system to run code at the kernel level that bypasses the means of protection. After that, the exploit will be able to read files from the inserted USB drive and install custom software, including third-party PS4 firmware.
Users with a fully updated PS4 will not be able to use the new exploit, as the vulnerability has already been fixed in firmware version 9.03 released on December 1st. Basically, as enthusiasts write on GitHub, looking at the differences between the two latest firmware releases helps them figure out how to get an exploit to reach its full potential.
In particular, some hackers have already noticed that the main problem on which the exploit is built “works on some PS5 firmware, although at the moment there is no known strategy for its use.”
On Twitter, the well-known cracker Znullptr (who also contributed to the new exploit) adds that “the exploit also affects Playstation5” but says that a full-fledged exploit for this console is not ready, as “the lead developer does not currently have a console PS5 “.
Let me remind you that we also talked about the fact that Hackers Send Anti-Capitalist Spam to Receipt Printers.
