PS4 3.50 Webkit Exploit from PlayStation 4 Dev Qwertyoruiop

Last month a PS4 Webkit Exploit 2.XX PoC surfaced, and today PlayStation 4 developer qwertyoruiop tweeted news of a PS4 3.50 Webkit Exploit via a heap use-after-free at WebCore::TimerBase::heapPopMin() bug with a proof-of-concept incoming.

To quote from PS4BOT on this development: Hey,

I felt i needed to share with you guys as this is going to public.... Which i wasn't really hoping for but ah well. As you can see below Qwerty is about to post heap use-after-free at WebCore::TimerBase::heapPopMin() public. I do currently have the POC but i am not sharing. I guess 3.50 is now going to be the golden firmware hey?

Thanks to @toni1988 in the PSXHAX.COM Shoutbox for the news tip!

Finally, below is also an Atari Java emulator demo video from an Internet site running on PS4 3.50 from Ryan Henderson for those interested!

 

[mcmrc1]

whoooooohaaaaaaaa thx for sharing

THX to all devs out there who are sharing nice things to us and not just talking bla bla all the day

 

[Howie648]

Yeah we get a lot of Blah Blah and little English around here. Kernel this and chain tool that lol.

 

[proskopina]

nice, i hope every dev share....whats the point keep it in the closet???

 

[B7U3 C50SS]

this is very nice!! i couldn't be happier ATM!! really made my day. OKAY, GUYS!! MAKE SURE YOU GUYS GO INTO THE SYSTEM Settings and go to AUTOMATIC DOWNLOADS AND DISABLE THE AUTO-DOWNLOADING OF SYSTEM UPDATE FILES!!

 

[Howie648]

Mine still downloads update files even if I turn it off.

 

[B7U3 C50SS]

Mine still downloads update files even if I turn it off.

that can be fixed. just do what i said.

 

[Fimo]

On this github I saw 3 files and gave a try on my 2.55 PS4
crash-during-iframe-load-stop.html
resources/crash-during-iframe-load-stop.html
resources/crash-during-iframe-load-stop-inner.html

I had the message "this test passes" meaning that this is not a vulnerability for the (2.55) PS4, no exploitation possible. Maybe vuln. for Iphone but not for the PS4.

We all have to take it easy

 

[mcmrc1]

@Fimo qwertyuiop will release files he said...
Or are these those files you tested ?

 

[Fimo]

Or are these those files you tested ?

Yes and I posted this screenshot 2 days ago on the chatbox "test not passes".