PT-2024-1106 · Apple+2 · Iphone+6

Trail + 1 · Published 2024-01-16 · Updated 2026-03-28 · CVE-2023-4969

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GPU vendors and host devices affected, including Apple, AMD, Qualcomm, and Imagination GPUs. Specific affected versions are not specified, but it is mentioned that the issue affects various architectures and devices, including some iPhone, iPad, and Mac models, as well as certain AMD and Qualcomm chips.

Description A vulnerability in the GPU kernel allows it to read sensitive data from another GPU kernel, even from another user or application, through an optimized GPU memory region called local memory . This issue can be exploited to extract data from the local memory of a GPU, potentially revealing confidential information. The vulnerability, known as LeftoverLocals, is particularly concerning in multi-user systems where different users' handlers run on the same GPU. It can also be used in malicious software to track the activity of processes running on the GPU. The estimated number of potentially affected devices worldwide is not specified, but it is mentioned that the issue affects millions of devices, including iPhones, iPads, and Macs.

Recommendations For Apple devices, update to the latest version of the operating system and apply the available patches for the M3 and A17 processors. For AMD devices, apply the recommended security patches and follow the company's guidelines for mitigating the issue. For Qualcomm devices, update to the latest firmware version, which includes patches for the vulnerability. For Imagination GPUs, apply the available patches and follow the company's recommendations for securing the devices. As a temporary workaround, consider restricting access to the vulnerable GPU kernel or disabling the use of the local memory region until a patch is available.

Exploit

Fix

Memory Leak

Buffer Overflow

Weakness Enumeration

CWE-401

CWE-120

Related Identifiers

BDU:2024-00388

CVE-2023-4969

Affected Products

A17

Astra Linux

Debian

M3

Mac

Ipad

Iphone

References · 53

• 🔥 https://blog.trailofbits.com · Exploit
• https://registry.khronos.org/vulkan/specs/1.3-extensions/html/index.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-4969 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4969 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-4969 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4969 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4969 · Security Note
• https://bdu.fstec.ru/vul/2024-00388 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-4969 · Vendor Advisory
• https://github.com/trailofbits/LeftoverLocalsRelease · Note
• https://developer.apple.com/documentation/metal/performing_calculations_on_a_gpu · Note
• https://source.android.com/docs/core/graphics/arch-vulkan · Note
• https://twitter.com/geeknik/status/1748638773250756997 · Twitter Post
• ❌ https://github.com/Mesa3D/mesa/blob/957009978ef6d7121fc0d710d03bc20097d4d46b/src/amd/vulkan/radv_shader.c#L709 · Note, Deleted