New Exploit Lets Hackers Jailbreak a PS4 in About 20 Seconds

Developers ufm42, DrYenyen, ntfargo, and ArabPixel have unveiled a new exploit that targets PS4 and PS5 through the CSSFontFace vulnerability in WebKit. On the PS4, the exploit was demonstrated using the console's built-in web browser, with the jailbreak process taking roughly 20 seconds.

On PS4, the vulnerability affects firmware versions 6.00 through 11.02, while kernel code execution is possible starting with firmware 7.00. After successfully triggering the exploit, the researchers gained access to the unofficial GoldHEN 2.4b18.10 loader, which enables homebrew applications and other advanced system modifications.

DrYenyen successfully launched the exploit through the PS4's stock web browser. This demonstration served as clear proof that the method works not only in theory, but also in practice using the console's default browser.

The jailbreak unlocks the PS4's hidden debug menu, allowing users to install unsigned applications and perform other system-level operations. However, judging by early feedback, the exploit is still far from stable, making it impractical for everyday use at this stage.

On the PS5, the same vulnerability affects firmware versions 1.00 through 13.40, but the exploit cannot currently be used on Sony's latest console. Built-in security mechanisms, including Address Space Layout Randomization (ASLR), prevent the vulnerability from being exploited successfully, meaning the method does not yet work on PS5.

That contrast is what makes this development particularly noteworthy: the exploit has been released publicly, but it currently works only on PS4. Even so, the public demonstration has reignited interest in console hacking and highlighted how quickly new exploitation techniques can spread online.

Meanwhile, the KytyPS5 0.0.3 emulator recently gained the ability to run the PS5 version of GTA 5 on PC.

Do you think Sony will be able to patch vulnerabilities like this quickly, or is it an endless cat-and-mouse game?