SLAP and FLOP security flaws affect all current Apple devices, and many older..

Topic

New Reply

https://9to5mac.com/2025/01/29/slap-and-flop-security-flaws-affect-all-current-apple-devices-and-many-older-ones/

Security researchers have discovered two flaws present in all current iPhones, iPads, and Macs – as well as many earlier ones. The vulnerabilities, known as SLAP and FLOP, could potentially allow an attacker to see the current contents of your open web tabs.

The flaws were introduced in the A15 and M2 chips, and are also found in subsequent ones, up to and including the latest version of each device …..

SLAP (Speculation Attacks via Load Address Prediction) and FLOP (False Load Output Predictions) were discovered by security researchers at the Georgia Institute of Technology. They work in the same way as Spectre and Meltdown..

If an attacker can inject malformed data into these processes, then it can read memory content that shouldn’t be accessible…

The researchers say there is no evidence that either vulnerability has yet been exploited in the wild…

(Apple) Based on our analysis, we do not believe this issue poses an immediate risk to our users…

* This are CPU bugs so maybe Apple will fix it with A19/M5 CPUs and older CPUs via firmware updates.

Reply | Quote

Replies

From my understanding, FLOP impacts M3, M4 and A17 chips and SLAP affects M2, A15 or newer CPU’s..

iThing users of Chrome or Safari browsers seem to be more at risk from FLOP whereas SLAP, exploits the system memory logic.
By introducing firmware side channel mitigations, surely the system performance will suffer.?
How financially convenient for ‘CPUertino’..it’s almost like it was pre-planned eh

Windows - commercial by definition and now function...

1 user thanked author for this post.

Alex5723

Reply | Quote

Microfix wrote:

it’s almost like it was pre-planned eh

Just like Spectre and Meltdown were for Intel ?

Reply | Quote