Known Exploits and Vulnerabilities

From PSPWiki

Format: Exploit Name (Game Used) [Type] – firmware supported: info

TIFF Exploit [eLoader] – 2.00: Used a bug in libtiff to run unsigned code, this exploit was patched in 2.01

GTA:LCS Exploit (GTA:LCS) [eLoader] – 2.00 to 2.60: Used a modified savegame to run unsigned code, can be used to downgrade in 2.50, 2.60, save slots 1-7 were patched to prevent this exploit in 2.70

TIFF Exploit [eLoader/HEN] – 2.01 to 2.80: Used a bug in libtiff to run unsigned code, can be used to downgrade in 2.01, 2.71, 2.80, this exploit was patched in 2.81

“Goofy” Exploit (GTA:LCS) [HEN] – 2.00 to 3.03: Used a modified savegame to run unsigned code, this exploit is different than the one for firmwares 2.00 to 2.60 as it uses save slot 8 instead of slots1-7, Sony patched slots 1-7 but not slot 8, can be used to downgrade in 3.03, this exploit was completely patched in 3.10

Illuminati Exploit (Lumines) [HEN] – 1.50 to 3.50: Used a modified savegame to run unsigned code, can be used to downgrade in 3.11,3.50, this exploit was patched in 3.51

Gripshift Exploit (Gripshift) [Programmer Dependent] –1.52-5.02: This exploit uses the UMD game Gripshift to launch homebrew using a hacked savegame, the homebrew this exploit launches must be coded specifically for this exploit, this exploit was patched in 5.03

Easter Eggsploit [HEN] – 5.00 to 5.05: Also called the “Laughing Man Exploit”, uses a bug in the way Sony implemented libtiff to run unsigned code, can be used to install CFW on 5.03*, this exploit was patched in 5.50

MOHH Exploit (Metal of Honor: Heroes) [Programmer Dependent] – 3.03-5.55: This exploit uses the UMD game Metal of Honor: Heroes to launch homebrew using a hacked savegame, the exploit happens when you kill yourself in an adhoc multiplayer mode. Currently, the homebrew this exploit launches must be coded specifically for this exploit, but an eLoader is currently being coded for it