PT-2026-51825 · Undefined · Undefined

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-49269

NVD

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal attacker app can run a GPU reader shader that reads stale register values left by a separate sandboxed victim app. In the proof of concept, GPUVictim.app generates a fresh random 128-bit secret using SecRandomCopyBytes and loads it into GPU registers. GPUAttacker.app, a separate sandboxed app, recovers the exact secret from stale GPU register state. NOTE: The vendor stated that this behavior affects only legacy hardware and has already been addressed at the hardware level in current-generation Apple Silicon.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2026-49269

Produtos afetados

Undefined

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-49269 · Nota de Segurança
• https://gist.github.com/scndls/9cbe31f2b0b1578eaeb311e601335355 · Nota