🎯 New Report #3452696: PS4 BD-J privilege escalation using nested JAR
🔺Severity: Medium
👽 Reporter: gezine
⭐️ Reputation: 255
🛠 State: resolved
💼 Team: PlayStation
💵 Bounty: 2500
🕐 Submitted: 2025-12-05
⏰ Disclosed: 2026-04-29 05:09:03
📝 Summary: A PS4 vulnerability was discovered in the Blu-ray Disc Java (BD-J) privilege escalation using nested JAR files. The vulnerability was found in the PS4 system software versions 13.00 to the latest version 13.02. The vulnerability was caused by a discrepancy between the security policy's path canonicalization and the actual class loading path. The security policy granted AllPermission to code that appeared to be loaded from a trusted directory, while the actual code was loaded from an untrusted nested JAR on the Blu-ray disc. This resulted in a Time-of-Check/Time-of-Use (TOCTOU) vulnerability that allowed untrusted code to obtain AllPermission.
📂 Report JSON File: 3452696
@hackeronereports