pastawithpesto/PS5-14.10-Jailbreak-Research

WebKit memory safety research targeting PlayStation 5 firmware 14.10 via CVE-2026-43720 (Canvas getContext() reentrant UAF). All data from probes running on retail hardware through the built-in browser. This project runs on AI compute -- multiple frontier models working in parallel around the clock. If this research is useful to you, please consider supporting it: Every contribution helps keep the models running and the research moving forward. Available: Workers, WebSocket, fetch, SubtleCrypto, Canvas 2D, ReadableStream, ResizableArrayBuffer, WeakRef, FinalizationRegistry, Proxy, BigInt, structuredClone, MediaSource, TransformStream, FontFace, Atomics, MessageChannel Not available: WebAssembly, SharedArrayBuffer, WebGL, WebAudio, IndexedDB, ServiceWorker, ReadableStream BYOB, WebRTC, WebGPU, OffscreenCanvas, Clipboard API HTMLCanvasElement::getContext() reads dictionary options via JS getters BEFORE setting the new context. A re-entrant getter creates a 2d context; the outer call then replaces it with bitmaprenderer, freeing the 2d context while its JS wrapper survives. After the trigger, a spray of 500 Canvas2D contexts reclaims the freed 768B slot.…