Sony Faces Unfixable Vulnerability: PlayStation 5 ROM Keys Leaked Online

This vulnerability exists at the hardware level, rendering standard software patches or OS updates ineffective for a permanent fix.

On January 2nd, reports surfaced within the cybersecurity and hacking communities regarding a significant leak of PlayStation 5 BootROM keys. According to insights from The Cybersec Guru, these keys—which are hardcoded directly into the APU and physically unalterable—have been exposed to the public. This discovery significantly paves the way for potential jailbreaks across all retail consoles currently on the market.

BootROM keys serve as the foundation of the PS5’s security architecture, verifying the authenticity of the bootloader via encrypted code embedded in the silicon during the startup sequence. With these keys now compromised, researchers and hackers gain the ability to decrypt the official bootloader, meticulously analyze the system’s initialization process, and leverage that knowledge to develop sophisticated kernel-level exploits.

The primary concern for Sony is that the flaw is structural; because the keys are “burned” into the chip, they cannot be modified through firmware or system updates. The only way for the company to address this leak is by introducing new processor revisions in future manufacturing cycles. As a result, every PS5 currently in existence—including the Slim and Pro variants—remains fundamentally vulnerable to upcoming jailbreaking tools derived from this exposure.

Source: iXBT.games