One of the PlayStation scene's most notable figures, TheFlow (Andy Nguyen), is back at it again. He's discovered a major exploit that affects not just one PlayStation console, but three. A hackerone report by TheFlow sheds light on five vulnerabilities that range in effectiveness, allowing users to load payloads that can be used to exploit the PlayStation 3, PlayStation 4, and even the PlayStation 5. The exploit is referred to as bd-jb, or the Blu-ray Disc Java Sandbox Escape, and was featured during a panel at this year's hardwear.io security conference.

Below are 5 vulnerabilities chained together that allows an attacker to gain JIT capabilities and execute arbitrary payloads. The provided payload triggers a buffer overflow that causes a kernel panic. Please consider each of the vulnerabilities individually. AFAIK, this is the first exploit chain that is being submitted to you

According to Nguyen's report, a UDF driver can cause an overflow on both the PS4 and the PS5. An exploit chain, aka bd-jb, can then be loaded as the payload as a burned Blu-ray disc. The hack, in summary, will allow users to burn physical discs of game backups, and then play them on their consoles. This affects PlayStation 4 consoles below OFW 9.50, and PlayStation 5 systems that are below OFW 5.0.

With these vulnerabilities, it is possible to ship pirated games on bluray discs. That is possible even without a kernel exploit as we have JIT capabilities.

bd-jb: Blu-ray Disc Java Sandbox Escape affecting PS3, PS4, PS5. My talk at @hardwear_io will be uploaded in a few weeks. #hardwear_io https://t.co/gVs03Ie46q

— Andy Nguyen (@theflow0) June 10, 2022

TheFlow's panel that discusses the exploit in detail will be uploaded in "a few weeks". The full hackerone report and all of its technical details can be read about below.

Following the initial report, TheFlow made an update to his claims.

I wanted to clarify: Without a kernel exploit, you won't be able to run any pirated games (which would have worked on the PS4 only anyways), because we don't have enough RAM in the bd-j process and there are some other constraints. It was only a theoretical impact.

— Andy Nguyen (@theflow0) June 11, 2022

Source

 

[Noctosphere]

In Denmark 50 50gb discs cost 40$ converted from dkk to dollars
Because we pay more tax here

just checked on Amazon Canada, a blu ray disc of 100gb is worth about 30-40CAD EACH
https://www.amazon.ca/s?k=100gb+blu...ix=100gb+blu+ray+disc,aps,57&ref=nb_sb_noss_2

 

[Marc_LFD]

just checked on Amazon Canada, a blu ray disc of 100gb is worth about 30-40CAD EACH
https://www.amazon.ca/s?k=100gb+blu...ix=100gb+blu+ray+disc,aps,57&ref=nb_sb_noss_2

The price may increase eventually.

 

[Noctosphere]

The price may increase eventually.

why wouldn't i be surprised?

 

[alt_Human]

is for me?

It was intended for myself but if someone's going to give me $1000 for it, it's theirs.

 

[wiiando]

The price may increase eventually.

It's not particularly cheap anyway, burning discs specifically BR is just too expensive still even at around $25-30, the time to burn (which is about 2 hours)

I guess it is worth it for new games.

I remember burning DL DVD's for 360 games, even that was a PITA, can imagine this is much worse, tying up a PC for 2 hours while it's writing, hoping of no failures, too long winded to be viable imo.

But it's probably the case that a lot of games actually aren't the full 100gb, may get away with a 50gb for some

 

[Noctosphere]

It's not particularly cheap anyway, burning discs specifically BR is just too expensive still even at around $25-30, the time to burn (which is about 2 hours)

I guess it is worth it for new games.

I remember burning DL DVD's for 360 games, even that was a PITA, can imagine this is much worse, tying up a PC for 2 hours while it's writing, hoping of no failures, too long winded to be viable imo.

But it's probably the case that a lot of games actually aren't the full 100gb, may get away with a 50gb for some

Well, apparently, HFW is 97GB for the ps4 version and 98GB for the ps5 version
Expect it to be about the same for most AAA games

 

[wiiando]

Well, apparently, HFW is 97GB for the ps4 version and 98GB for the ps5 version
Expect it to be about the same for most AAA games

I was going off a few non AAA releases I'd seen

But games are getting bigger so you're probably roght

 

[rmorris003]

Most stores here in Canada got rid of all their blank disc media as everything is digital now

 

[Marc_LFD]

I was going off a few non AAA releases I'd seen

But games are getting bigger so you're probably roght

You know, I wanted to download and play PUBG Battlegrounds (F2P) on my 9.60 PS4, but the freaking game is over 80GBs in total (at least 10hrs to dl all)!

Nintendo can compress games amazingly while others reach nearly 100GBs.

 

[Marc_LFD]

Most stores here in Canada got rid of all their blank disc media as everything is digital now

To be fair, it's very uncommon to burn discs nowadays.

With USBs and HDDs I stopped using CDs/DVDs to burn data.

 

[Deleted member 559230]

$20 each? Legit games could be eventually bought for less than that.

Yes. I own a UHD burner and have purchased the cheapest 100GB discs I could find. Verbatim makes them.

https://www.amazon.com/s?k=verbatim+bd-r+100gb

 

[Viri]

Imagine your burner fucking up, while burning on a 100gb disc.


I can only imagine how confused Amazon sellers, that are selling 100gb bluray discs are to why their sales have went up by 2000%.

 

[tatumanu]

So maybe there will be an unlocking disc to hack your playstation to read games from somewhere else?
I don't know why I care, got no time to game. I'm just so mind blown by TheFlow (for like the 10th time)

 

[Noctosphere]

So maybe there will be an unlocking disc to hack your playstation to read games from somewhere else?
I don't know why I care, got no time to game. I'm just so mind blown by TheFlow (for like the 10th time)

you've got no time to game?
Then why the fuck are you here?

 

[raxadian]

This mean we will probably able to launch backup directly ( from blu-ray) or launch cfw from blu-ray

Time to buy a super-slim

Super slim is a bit too breakable, so I don't recommend it.

 

[tatumanu]

you've got no time to game?
Then why the fuck are you here?

Because I still like the news ... but if you really want to know:

https://gbatemp.net/threads/help-me-prepare-my-hacked-consoles-stuff-for-sale.613657/post-9850675

 

[elm]

Yes. I own a UHD burner and have purchased the cheapest 100GB discs I could find. Verbatim makes them.

https://www.amazon.com/s?k=verbatim+bd-r+100gb

Quick Question - The Flow was talking about using BD-RE discs he said "Not to use BD-R ones because they're writable once"

What is wrong with just using BD-R ones??

 

[Marc_LFD]

Quick Question - The Flow was talking about using BD-RE discs he said "Not to use BD-R ones because they're writable once"

What is wrong with just using BD-R ones??

Well, it says right there. Use once only.

RW allows to burn and rewrite.

 

[RivenMain]

rip I'm 5.1 xD

 

[elm]

Well, it says right there. Use once only.

RW allows to burn and rewrite.

Ok….. so Basically just to re-write another game over it and that’s all? I guess I thought There was some bigger picture I was missing with the BD-RE discs.