CVE-2025-64390 is a privilege escalation vulnerability affecting Sony PlayStation 4 firmware versions 13.00 through 13.02. The vulnerability allows an attacker to escape the BD-J sandbox environment by exploiting a malformed JAR file, which could lead to unauthorized privilege escalation on the affected device. The CVSS 3.1 base score is 7.4, indicating high severity, with attack vector local, high attack complexity, no privileges required, and no user interaction needed. There is no vendor advisory or patch information available at this time.

Successful exploitation could allow an attacker with local access to the PS4 to escalate privileges beyond the BD-J sandbox, potentially leading to full control over the device, including confidentiality, integrity, and availability impacts. However, exploitation requires local access and a high level of attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted Blu-ray discs or JAR files on affected PS4 firmware versions. Monitor Sony's official channels for updates and apply patches promptly once available.