Apple CPUs are affected by new SLAP and FLOP side-channel attacks

[Xiao_Xi]

Researchers at the Georgia Institute of Technology have presented two white papers on Data Speculation Attacks via Load Address Prediction in Apple Silicon (SLAP) and Vulnerating the Apple M3 CPU via False Load Output Predictions (FLOP).

The affected Apple devices are:

• All Mac laptops from 2022-present (MacBook Air, MacBook Pro)
• All Mac desktops from 2023-present (Mac Mini, iMac, Mac Studio, Mac Pro)
• All iPad Pro, Air, and Mini models from September 2021-present (Pro 6th and 7th gen., Air 6th gen., Mini 6th gen.)
• All iPhones from September 2021-present (All 13, 14, 15, and 16 models, SE 3rd gen.)

Apple has communicated to us that they plan to address these issues in an upcoming security update, hence it is important to enable automatic updates and ensure that your devices are running the latest operating system and applications.

SLAP and FLOP

The SLAP and FLOP Address and Value Prediction Attacks

predictors.fail

 

[Nermal]

Please continue in the news thread.