One of the PlayStation scene's most notable figures, TheFlow (Andy Nguyen), is back at it again. He's discovered a major exploit that affects not just one PlayStation console, but three. A hackerone report by TheFlow sheds light on five vulnerabilities that range in effectiveness, allowing users to load payloads that can be used to exploit the PlayStation 3, PlayStation 4, and even the PlayStation 5. The exploit is referred to as bd-jb, or the Blu-ray Disc Java Sandbox Escape, and was featured during a panel at this year's hardwear.io security conference.

Below are 5 vulnerabilities chained together that allows an attacker to gain JIT capabilities and execute arbitrary payloads. The provided payload triggers a buffer overflow that causes a kernel panic. Please consider each of the vulnerabilities individually. AFAIK, this is the first exploit chain that is being submitted to you

According to Nguyen's report, a UDF driver can cause an overflow on both the PS4 and the PS5. An exploit chain, aka bd-jb, can then be loaded as the payload as a burned Blu-ray disc. The hack, in summary, will allow users to burn physical discs of game backups, and then play them on their consoles. This affects PlayStation 4 consoles below OFW 9.50, and PlayStation 5 systems that are below OFW 5.0.

With these vulnerabilities, it is possible to ship pirated games on bluray discs. That is possible even without a kernel exploit as we have JIT capabilities.

bd-jb: Blu-ray Disc Java Sandbox Escape affecting PS3, PS4, PS5. My talk at @hardwear_io will be uploaded in a few weeks. #hardwear_io https://t.co/gVs03Ie46q

— Andy Nguyen (@theflow0) June 10, 2022

TheFlow's panel that discusses the exploit in detail will be uploaded in "a few weeks". The full hackerone report and all of its technical details can be read about below.

Following the initial report, TheFlow made an update to his claims.

I wanted to clarify: Without a kernel exploit, you won't be able to run any pirated games (which would have worked on the PS4 only anyways), because we don't have enough RAM in the bd-j process and there are some other constraints. It was only a theoretical impact.

— Andy Nguyen (@theflow0) June 11, 2022

Source

 

[Noctosphere]

Ok….. so Basically just to re-write another game over it and that’s all? I guess I thought There was some bigger picture I was missing with the BD-RE discs.

Actually, if it fails once on a disc, you can't reuse ir, so the disc will have to be trashed
While on RW, if the burning fails, well, the disc is still usable

 

[elm]

Actually, if it fails once on a disc, you can't reuse ir, so the disc will have to be trashed
While on RW, if the burning fails, well, the disc is still usable

awww yeah good point

 

[Marc_LFD]

RW discs would make more sense and make the whole "Swap Magic" process more tolerable.

I'd still rather drag n' drop to my USB and then install on my PS4. Also, while the Pro is better than the Launch and Slim, the Slim is silent so that's a huge plus for me (I seriously hate noisy consoles).

 

[urbanman2004]

This mf just open up Pandora's Box and this is gonna turn out to be the second coming of the "G-Hotz" saga. TheFlow better lawyer up, lol.

 

[Viri]

Imagine if we get a PS5 hack before we get a Switch OLED hack(yes I know the modchips exist).

 

[Nakamichi]

@Marc_LFD repaste a ps4 pro with Coolermaster Mastergel Maker and it will be near silent, too.

 

[chocoboss]

Super slim is a bit too breakable, so I don't recommend it.

From what I know ( I can be wrong ) it didn't overheat compared to slim and OG ( I have a slim and it heat a lot while playing somme games and I'm afraid it will not live forever ;+; )

 

[raxadian]

Linux on PS4 Pro?

 

[PhyChris]

are they 'backtracking' on what this is capable of or how far they have taken it?

 

[Lv44ES_Burner]

Yeah, I'm not clear how useful this is, especially after his follow-up tweet. Can someone explain if we're actually able to use this to hack a PS3 or its successors, or not, in an easier fashion? Furthermore, will such a hack work on all PS3 revisions, including the Slims and Super-Slims?

EDIT: I feel I should clarify for a bit that I could care less about piracy on the PS3, it's more having it hacked to begin with.

 

[depaul]

Is this genius guy still not done collecting money from Sony?

 

[hippy dave]

Is this genius guy still not done collecting money from Sony?

Hell no

 

[Marc_LFD]

@Marc_LFD repaste a ps4 pro with Coolermaster Mastergel Maker and it will be near silent, too.

Thermal paste? I heard that does wondera for PS3/PS4 consoles. However, I've never done it so would have to pay a professional for it.

Not sure if it'd be worth it after all.

 

[Chrisssj2]

BUYING A PS5 ASAP

Why? all the games will come on pc. im not buying any console this time around. Also limited to FW 5.0. have fun

 

[Nakamichi]

Thermal paste? I heard that does wondera for PS3/PS4 consoles. However, I've never done it so would have to pay a professional for it.

Not sure if it'd be worth it after all.

I assure you, its not at all difficult if you go slow and follow a good guide like those by ifixit.
The thermal paste used for ps4/ps3 etc wasnt great when it was brandnew and age has only made it worse.

A fresh application with a high-quality thermal paste isnt expensive and can make a world of difference.

...except on a ps5. that one uses liquid metal and thats already extremely good.

 

[Marc_LFD]

I assure you, its not at all difficult if you go slow and follow a good guide like those by ifixit.
The thermal paste used for ps4/ps3 etc wasnt great when it was brandnew and age has only made it worse.

A fresh application with a high-quality thermal paste isnt expensive and can make a world of difference.

...except on a ps5. that one uses liquid metal and thats already extremely good.

Thanks.

I'm currently testing/using a PS4 Pro I bought around 5 months ago and it's very quiet.

 

[Nakamichi]

@Marc_LFD well, if its quiet i doubt there is any need, even if you could gain some improvements.

Just keep in mind that you have options available to you if it ever gets loud!

 

[Marc_LFD]

@Marc_LFD well, if its quiet i doubt there is any need, even if you could gain some improvements.

Just keep in mind that you have options available to you if it ever gets loud!

I have two Pros, this quiet one and an extremely loud one. Both have 9.00 so it's something to consider.

 

[sley]

Awesome but sad that Sony was able to patch it, imagine running homebrew on a playstation system while still being able to go online.

 

[Marc_LFD]

Awesome but sad that Sony was able to patch it, imagine running homebrew on a playstation system while still being able to go online.

Like PS3/Vita does.