Hacker News Reader

Usually by exploiting holes in some code that does parsing, e.g. for images. Here [1] is a nice write-up.

Similarly, homebrew on the PSP exploited libjpeg or libtiff, so this is one of those vectors that we're still dealing with 16 years later.