GPU漏洞允許駭客自記憶體汲取資料，殃及蘋果、AMD與高通
· 2024-01-19
資安業者Trail of Bits公布存在於通用繪圖處理器（GPGPU）的安全漏洞CVE-2023-4969，可用來恢復其它程序於GPU本地端記憶體所建立的資料，波及蘋果、AMD、高通及Imagination的GPU產品
_Trail of Bits
Trail of Bits總計測試了7家GPU供應商的11臺裝置，並在蘋果、AMD與高通的裝置上偵測到LeftoverLocals的存在，並表示記憶體外洩資料的容量取決於GPU的大小，愈大的GPU含有愈多的記憶體即可能外洩更多資料，例如在AMD Radeon RX 7900 XT上可在每個核心中恢復5MB的資料。
而受到LeftoverLocals漏洞波及的裝置涵蓋了蘋果的iPhone 12 Pro（A14）、第三代iPad Air（A12）、採用M2的MacBook Air及採用高通Snapdragon處理器的HTC 1+等。至於Trail of Bits並沒有在Imagination裝置上偵測到LeftoverLocals，是由Google在不同的Imagination裝置上發現的。
Trail of Bits是在去年9月向CERT/CC 提報LeftoverLocals漏洞，並於本周發表。
熱門文章
Kazakhstan plans to penalise online casino promotions
Regulation
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
British gambling levy rates confirmed for each vertical
Regulation
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
