CVE-2022-3349: Sony Playstation 4 Firmware

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.

Affected products

• Sony Playstation 4 Firmware: affected versions not specified
• Sony Playstation 5 Firmware: affected versions not specified

Published 2022-09-28. Last modified 2026-06-17.