GPU漏洞允許駭客自記憶體汲取資料，殃及蘋果、AMD與高通
· 2024-01-19
資安業者Trail of Bits公布存在於通用繪圖處理器（GPGPU）的安全漏洞CVE-2023-4969，可用來恢復其它程序於GPU本地端記憶體所建立的資料，波及蘋果、AMD、高通及Imagination的GPU產品
_Trail of Bits
Trail of Bits總計測試了7家GPU供應商的11臺裝置，並在蘋果、AMD與高通的裝置上偵測到LeftoverLocals的存在，並表示記憶體外洩資料的容量取決於GPU的大小，愈大的GPU含有愈多的記憶體即可能外洩更多資料，例如在AMD Radeon RX 7900 XT上可在每個核心中恢復5MB的資料。
而受到LeftoverLocals漏洞波及的裝置涵蓋了蘋果的iPhone 12 Pro（A14）、第三代iPad Air（A12）、採用M2的MacBook Air及採用高通Snapdragon處理器的HTC 1+等。至於Trail of Bits並沒有在Imagination裝置上偵測到LeftoverLocals，是由Google在不同的Imagination裝置上發現的。
Trail of Bits是在去年9月向CERT/CC 提報LeftoverLocals漏洞，並於本周發表。
熱門文章
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
HUIDU Invites You to Booth T70 at iGB L!VE 2026 — Let’s Ignite London This July!
HUIDU Focus
GGC Awards 2026 Shines in Colombo: Honoring Leaders and Innovators in the iGaming Industry
HUIDU Focus
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Indiana online casino bill stalls in House committee
Regulation
British gambling levy rates confirmed for each vertical
Regulation
