CVE-2022-3349

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFAT_readupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical device. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-209679.

• CWE-119
• CWE-787

• https://hackerone.com/reports/1340942Exploit, Third Party Advisory
• https://vuldb.com/?id.209679Permissions Required, Third Party Advisory
• https://hackerone.com/reports/1340942Exploit, Third Party Advisory
• https://vuldb.com/?id.209679Permissions Required, Third Party Advisory

Published

Sep 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3342The Jetpack CRM plugin for WordPress is vulnerable to PHAR d…8.8
• CVE-2022-3343The WPQA Builder WordPress plugin before 5.9.3 (which is a c…3.5
• CVE-2022-3344A flaw was found in the KVM's AMD nested virtualization (SVM…5.5
• CVE-2022-3346DNSSEC validation is not performed correctly. An attacker ca…6.5
• CVE-2022-3347DNSSEC validation is not performed correctly. An attacker ca…7.5
• CVE-2022-3348Just like in the previous report, an attacker could steal th…4.9
• CVE-2022-3350The Contact Bank WordPress plugin through 3.0.30 does not sa…4.8
• CVE-2022-3351An issue has been discovered in GitLab EE affecting all vers…4.3
• CVE-2022-3352Use After Free in GitHub repository vim/vim prior to 9.0.061…7.8
• CVE-2022-3353 A vulnerability exists in the IEC 61850 communication sta…7.5
• CVE-2022-3354A vulnerability has been found in Open5GS up to 2.4.10 and c…7.5
• CVE-2022-3355Cross-site Scripting (XSS) - Stored in GitHub repository inv…5.4