CVE-2022-3349

Name of the Vulnerable Software and Affected Versions Sony PS4 and PS5 (affected versions not specified)

Description A critical issue affects the exFAT Handler component, specifically the UVFAT readupcasetable function. The manipulation of the dataLength argument leads to a heap-based buffer overflow. This issue can be exploited by launching an attack on the physical device.

Recommendations Upgrade the affected exFAT Handler component to a newer version. As a temporary workaround, consider restricting access to the UVFAT readupcasetable function until a patch is available. Avoid manipulating the dataLength argument in the affected component until the issue is resolved.