PS5 firmware 14.20 patched a vulnerability that allowed pirated games to run natively

Sony has released PlayStation 5 firmware update 14.20. According to prolific hacker Ark Sama, the patch closes a major vulnerability that would have allowed pirated games to run natively on the console.

News like this usually frustrates modders, but this time the reaction is the opposite. Users on the r/PS5_Jailbreak subreddit welcomed the update with enthusiasm – with the hole fixed, the exploit can finally be released publicly.

Ark Sama has been teasing the find for close to a year. The exploit makes it possible to natively run so-called fake PKG files on the PS5 – unsigned installation packages that the console normally refuses to install.

Right now, tricking a PS5 into running an unauthorized PKG file takes a whole set of workarounds. The methods work, but performance takes a noticeable hit. With the new exploit, fake PKGs, including pirated copies of games, will run on the console much better.

A detailed technical breakdown comes from the YouTube channel Modded Hardware. In the video, the creators explain why Ark Sama exploit could seriously shake up the PS5 homebrew scene once it is released.

The reason for the community excitement is simple. Ark Sama has stated several times that the exploit would only be released once Sony had patched it, since the vulnerability was reported through HackerOne. Sony and many other tech companies use that platform to pay people who find flaws in their products.

It might look like the hacker is just waiting for a payday before screwing over Sony and releasing the exploit anyway. In reality, this is part of HackerOne "Vulnerability Disclosure Standards," which both sides agree to in advance. Under the "Mutual Agreement" disclosure setting, vulnerabilities can legally be made public after they have been fixed.

In practice, PS5 owners who haven't updated to firmware 14.20 will be able to use the exploit once it is published. Ark Sama, meanwhile, will get paid by Sony for the reported vulnerability.