Vulnerabilities

This page lists vulnerabilities found in the original Sony PlayStation system software and hardware.

PS Game Savedata

These flaws are relatively easy to find and exploit. There is a write-up on finding these flaws here.

Game/Application name	Vulnerability	Summary	Revisions	Date of the discovery	Author of the discovery
Sports Superbike 2			N/A	2014	qwikrazor87 and Acid_snake
XS Moto			N/A	2014	qwikrazor87 and Acid_snake
Tekken 2			N/A	2014	qwikrazor87 and Acid_snake
Tekken 3			N/A	?2022?	?alex-free?
Castlevania Chronicles	Stack Buffer Overflow via unchecked string length	The player name has a limit of 8 character strings to create a save-slot (Both original or arranged modes of the game). Since the string length/size is not checked, one can use a very large string to overwrite several stack registers including the $ra(return address) to eventually jump to unsigned code in the savegame.	N/A	August 12th, 2018	ChampionLeake
Brunswick Circuit Pro Bowling 1 & 2	Stack Buffer Overflow via unchecked Custom Bowler Name length	Brunswick Circuit Pro Bowling 1 & 2 offers players to create their own bowlers in terms of physical appearances and names. The bowlers' name is limited up to 15 characters long. When the player wants to create name, it's copied to the stack, however the string length isn't checked. With a very large string, one can overwrite the stack and take control of the return address($ra) to eventually jump to unsigned code in the savegame.	1.0	January 20th, 2019	ChampionLeake
Tony Hawk Pro Skater 2	Stack Buffer Overflow via unchecked Custom Skater name	The player has the chance to create their own skater(physical appearance, skateboard, names, etc.). The skater name is copied to the stack, however the string length isn't checked. With a large skater name, one can overwrite the stack and control the return address($ra) to eventually jump to unsigned code in the savegame. One can trigger this overflow by selecting "Career Mode" and then selecting the "Create a new career" option.	1.0	January 22nd, 2019	ChampionLeake

System/Hardware Flaws

These flaws are related to the system/hardware that holds and powers the Sony PlayStation.

Summary	Vuln/Flaw	Documentation	Revisions	Timeframe this vuln was discovered	Vuln discovered by
N/A	N/A	N/A	N/A	N/A	N/A

Not exploitable game savedata vulnerabilities

These are games that developers have fuzzed/researched trying to find bugs. Any useless crashes or games that do not crash at all go here. This is to inform researchers which games have already been studied.

• Family Feud -- Using a large string for the family name does not seem to crash the game. In conclusion, the family name is not exploitable. (Researched by ChampionLeake)