The Relapse exploit targets PlayStation 5 consoles, providing a method to execute unsigned code across a wide range of firmware versions. According to the project's GitHub repository, the exploit supports PS5 firmware versions from 7.00 up to and including 13.60, covering multiple years of console updates. The repository credits contributors including Sonic_Iso for the kernel exploit, Jordy for the WebKit exploit and kernel bug, and ntfargo and ufm42 as exploit developers, with Dr. Yenyen handling testing responsibilities.
The exploit operates through a two-stage attack chain. The initial browser stage leverages JavaScriptCore (JSC) information leaks and a structured clone object pool mismatch to corrupt a typedarray in memory. Following this, the kernel stage combines an address leak with a use-after-free (UAF) vulnerability in the aio_multi_wait function to establish kernel-level read and write access. Upon successful exploitation, the payload causes an ELF loader to listen on port 9021, which can then be used to execute additional code on the console.
The source notes several stability considerations that affect reliability. The WebKit component may require multiple attempts, with users advised to reload the page if the browser stalls during exploitation. More seriously, the kernel exploit may hang or cause the console to panic, necessitating a full reboot before attempting again. The repository emphasizes that the software is intended for educational and security research purposes only, explicitly stating it does not endorse piracy or unauthorized access to commercial devices.