Integrated GPUs may allow side-channel and rowhammer attacks using WebGL ("Glitch")

ronjor · May 3, 2018

Original Release date: 03 May 2018 | Last revised: 03 May 2018

Overview
Some platforms with integrated GPUs, such as smartphones, may allow both side-channel and rowhammer attacks via WebGL, which may allow a remote attacker to compromise the browser on an affected platform. An attack technique that leverages these vulnerabilities is called "GLitch."
Solution
Apply an update
Google Chrome and Mozilla Firefox have released updates which disable high precision timers in the browser.
Other browsers do not appear to be affected.
Click to expand...

See thread. > https://www.wilderssecurity.com/thr...es-gpu-to-compromise-an-android-phone.403379/

Log in or Sign up

Integrated GPUs may allow side-channel and rowhammer attacks using WebGL ("Glitch")

ronjor Global Moderator

Log in or Sign up

Integrated GPUs may allow side-channel and rowhammer attacks using WebGL ("Glitch")

ronjor Global Moderator

Useful Searches