Apple has confirmed that a new GPU vulnerability is present in the M2 MacBook Air, and could be present in other Apple devices.
The vulnerability—named LeftoverLocals—has been found in GPUs made by Apple, Qualcomm, AMD and Imagination. When used successfully, attackers can read data left over from GPU processing, with the technique being demonstrated with an AI chatbot query:
“LeftoverLocals impacts the security posture of GPU applications as a whole, with particular significance to LLMs and ML models run on impacted GPU platforms. By recovering local memory—an optimized GPU memory region—we were able to build a PoC where an attacker can listen into another user’s interactive LLM session (e.g., llama.cpp) across process or container boundaries…”
Read more at: https://www.forbes.com