CVE-2022-3349 — Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow

Description (CNA)

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.

Affected (CNA)

Vendor / product	Versions
Sony / PS4	affected n/a
Sony / PS5	affected n/a

CWE

CWE-119

References

https://hackerone.com/reports/1340942
https://vuldb.com/?id.209679

ADP enrichment

CVE

No English description supplied.

https://hackerone.com/reports/1340942
https://vuldb.com/?id.209679

CISA-ADP

No English description supplied.

No references supplied.