A privilege escalation vulnerability exists in the PlayStation 4 firmware, allowing exploitation of the BD-J sandbox through a malformed Java Archive file. By escaping the sandbox, an attacker can execute code with elevated privileges on the console, potentially enabling full control over the device.

Sony PlayStation 4 consoles running firmware versions 13.00, 13.01, or 13.02 are affected. The vulnerability resides in the BD-J (Blu‑ray Disc Java) sandbox that is intended to isolate Java applications from the underlying system.

The CVSS score is 7.4, and the EPSS score is < 1%. The vulnerability is not listed in CISA’s KEV catalog, indicating no known active exploits as of now. Escaping the BD-J sandbox grants privilege escalation, a high‑severity flaw. Exploitation requires processing a malformed JAR file, and it is inferred that the attacker would need local or physical disc access to provide such a file. While no public exploit has been disclosed, the potential impact justifies immediate patching once an update is available.