Vita3K
Monthly
Path traversal in Vita3K builds before 4187 allows a crafted .vpk archive to write files outside the emulator's install directory, potentially leading to host code execution with the privileges of the Vita3K process. Exploitation is local and requires the victim to install a malicious package, so risk is moderate-to-low for most environments but non-trivial for users who routinely sideload .vpk files. No public exploit code has been identified at time of analysis, and the flaw is remediated in build 4187.
Path traversal in Vita3K builds before 4187 allows a crafted .vpk archive to write files outside the emulator's install directory, potentially leading to host code execution with the privileges of the Vita3K process. Exploitation is local and requires the victim to install a malicious package, so risk is moderate-to-low for most environments but non-trivial for users who routinely sideload .vpk files. No public exploit code has been identified at time of analysis, and the flaw is remediated in build 4187.