Vulnerabilities: Revision history

17 February 2023

• curprev 20:4920:49, 17 February 2023‎ CelesteBlue talk contribs‎ 53,792 bytes +648‎ →‎Secure Block
• curprev 20:3220:32, 17 February 2023‎ CelesteBlue talk contribs‎ 53,144 bytes +651‎ →‎Bigmac
• curprev 19:2919:29, 17 February 2023‎ CelesteBlue talk contribs‎ 52,493 bytes +464‎ No edit summary
• curprev 19:0619:06, 17 February 2023‎ CelesteBlue talk contribs‎ 52,029 bytes −6,998‎ Move useless bugs to the Bugs wiki page.
• curprev 18:3418:34, 17 February 2023‎ CelesteBlue talk contribs‎ 59,027 bytes −18‎ →‎WebKit 537.73 (as used in PS Vita FW 3.30-3.74) (to be disclosed)
• curprev 18:3418:34, 17 February 2023‎ CelesteBlue talk contribs‎ 59,045 bytes +33‎ Add 3.74 webkit exploit description and improve consistency.
• curprev 18:1818:18, 17 February 2023‎ CelesteBlue talk contribs‎ 59,012 bytes +175‎ Minor improvements: naming consistency and some fixes.

13 February 2023

• curprev 02:3302:33, 13 February 2023‎ CelesteBlue talk contribs‎ 58,837 bytes 0‎ →‎Secure World (TrustZone)

12 February 2023

• curprev 20:5420:54, 12 February 2023‎ CreepNT talk contribs‎ m 58,837 bytes +148‎ →‎Arbitrary kernel execution due to SceDeci4pDbgpForDriver exported to usermode: Fix explaination (thanks to PoS for remark about non-sensicality)

28 January 2023

• curprev 18:3518:35, 28 January 2023‎ Schorlus talk contribs‎ m 58,689 bytes −9‎ Update h-encore writeup link

23 January 2023

• curprev 23:2123:21, 23 January 2023‎ CelesteBlue talk contribs‎ 58,698 bytes +16‎ Harmonize Team Molecule naming

10 January 2023

• curprev 17:4817:48, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,682 bytes +5‎ →‎Kernel modules addresses leak by kernel non-syscall functions import from usermode fSELF
• curprev 17:4117:41, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,677 bytes −22‎ →‎Syscall table another reference
• curprev 17:3917:39, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,699 bytes +148‎ →‎Syscall handler leaks syscall table virtual address
• curprev 17:3117:31, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,551 bytes +85‎ →‎Syscall handler leaks syscall table virtual address
• curprev 17:1117:11, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,466 bytes +5‎ →‎Kernel modules addresses leak by kernel non-syscall functions import from usermode fSELF
• curprev 16:0016:00, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,461 bytes −9‎ →‎Kernel modules addresses leak by kernel non-syscall functions import from usermode fSELF
• curprev 16:0016:00, 10 January 2023‎ Princess of Sleeping talk contribs‎ 58,470 bytes −29‎ →‎Kernel modules addresses leak by kernel non-syscall functions import from usermode fSELF

31 December 2022

• curprev 13:5613:56, 31 December 2022‎ CelesteBlue talk contribs‎ 58,499 bytes +10‎ →‎Heap information leak in sceNetSyscallControl
• curprev 10:2210:22, 31 December 2022‎ Princess of Sleeping talk contribs‎ 58,489 bytes +301‎ →‎Heap information leak in sceNetSyscallControl

30 December 2022

• curprev 23:0223:02, 30 December 2022‎ CelesteBlue talk contribs‎ 58,188 bytes +931‎ →‎Kernel
• curprev 05:4305:43, 30 December 2022‎ CelesteBlue talk contribs‎ 57,257 bytes +283‎ →‎Kernel stack leak in sceIoDevctl
• curprev 04:4704:47, 30 December 2022‎ Princess of Sleeping talk contribs‎ 56,974 bytes +817‎ →‎Kernel

21 October 2022

• curprev 18:3118:31, 21 October 2022‎ CelesteBlue talk contribs‎ 56,157 bytes +25‎ →‎sceNgsVoiceDefinitionGetPresetInternal insufficient checks (arbitrary kernel read)

17 October 2022

• curprev 07:2507:25, 17 October 2022‎ Princess of Sleeping talk contribs‎ 56,132 bytes +53‎ →‎sceNgsVoiceDefinitionGetPresetInternal insufficient checks (arbitrary kernel read)

26 September 2022

• curprev 11:0311:03, 26 September 2022‎ CelesteBlue talk contribs‎ 56,079 bytes +65‎ →‎SceIofilemgr missing internal NULL check

25 September 2022

• curprev 05:2005:20, 25 September 2022‎ Princess of Sleeping talk contribs‎ 56,014 bytes +350‎ →‎SceNgs design flaws (h-encore)
• curprev 03:1703:17, 25 September 2022‎ Princess of Sleeping talk contribs‎ 55,664 bytes +379‎ →‎Bugs

23 September 2022

• curprev 23:4623:46, 23 September 2022‎ CelesteBlue talk contribs‎ 55,285 bytes +662‎ No edit summary
• curprev 22:5222:52, 23 September 2022‎ CelesteBlue talk contribs‎ 54,623 bytes +257‎ →‎PSM (PlayStation Mobile) exploits
• curprev 22:3222:32, 23 September 2022‎ Li talk contribs‎ 54,366 bytes +581‎ →‎PSM (PlayStation Mobile) exploits
• curprev 22:2422:24, 23 September 2022‎ Li talk contribs‎ 53,785 bytes −90‎ →‎SecurityCritical whitelist fail: add information about windows ..
• curprev 22:2322:23, 23 September 2022‎ Li talk contribs‎ 53,875 bytes +97‎ →‎PSM (PlayStation Mobile) exploits
• curprev 22:2122:21, 23 September 2022‎ Li talk contribs‎ 53,778 bytes +419‎ →‎PSM (PlayStation Mobile) exploits: PSM Unity privledge esculation is feisable, add memes about the SecurityCritical whitelist

17 September 2022

• curprev 17:3117:31, 17 September 2022‎ Princess of Sleeping talk contribs‎ 53,359 bytes +200‎ →‎Kernel modules addresses leak by kernel non-syscall functions import from usermode fSELF
• curprev 11:2511:25, 17 September 2022‎ Princess of Sleeping talk contribs‎ 53,159 bytes +894‎ →‎Kernel stack address leak using sceNgsRackGetRequiredMemorySize

12 September 2022

• curprev 16:3816:38, 12 September 2022‎ CelesteBlue talk contribs‎ 52,265 bytes +163‎ No edit summary

2 September 2022

• curprev 23:3223:32, 2 September 2022‎ Princess of Sleeping talk contribs‎ 52,102 bytes +214‎ →‎Kernel

28 August 2022

• curprev 13:4813:48, 28 August 2022‎ CreepNT talk contribs‎ 51,888 bytes −4‎ →‎Syscall handler treats the syscall ID as a signed integer: Fix typo
• curprev 13:0913:09, 28 August 2022‎ CreepNT talk contribs‎ 51,892 bytes +1,426‎ →‎Kernel: Add the "Syscall handler treats the syscall ID as a signed integer" vulnerability
• curprev 12:4212:42, 28 August 2022‎ CreepNT talk contribs‎ 50,466 bytes +450‎ →‎Syscall handler doesn't check syscall id (integer overflow): Add more information to the description, mark as present since 0.931, remove integer overflow from title because it's not an integer overflow

7 August 2022

• curprev 13:0313:03, 7 August 2022‎ Princess of Sleeping talk contribs‎ 50,016 bytes +414‎ →‎Kernel

11 July 2022

• curprev 06:4806:48, 11 July 2022‎ Princess of Sleeping talk contribs‎ 49,602 bytes +1,910‎ →‎Kernel

21 June 2022

• curprev 21:2321:23, 21 June 2022‎ CreepNT talk contribs‎ 47,692 bytes +1,177‎ →‎Kernel modules addresses leak by kernel non-syscall functions import from usermode fSELF: Add PoC code

13 June 2022

• curprev 07:5307:53, 13 June 2022‎ CelesteBlue talk contribs‎ 46,515 bytes +84‎ →‎Unlimitted sp control (0.990)
• curprev 06:2606:26, 13 June 2022‎ CelesteBlue talk contribs‎ 46,431 bytes +915‎ →‎Module non-syscall k2u import (Most kernel module address leak)

12 June 2022

• curprev 17:5217:52, 12 June 2022‎ Princess of Sleeping talk contribs‎ 45,516 bytes +1,113‎ →‎Kernel

9 March 2022

• curprev 21:2621:26, 9 March 2022‎ Princess of Sleeping talk contribs‎ 44,403 bytes +2,022‎ No edit summary

6 March 2022

• curprev 18:5918:59, 6 March 2022‎ CreepNT talk contribs‎ 42,381 bytes +24‎ →‎Arbitrary kernel execution due to SceDeci4pDbgpForDriver exported to usermode: Mark this may not actually allow kernel ACE, add firmware this was fixed in
• curprev 18:2918:29, 6 March 2022‎ Princess of Sleeping talk contribs‎ 42,357 bytes 0‎ →‎Unlimitted sp control (0.990)