Michael Schwarz @ CISPA Helmholtz Center for Information Security
Andreas Kogler
Architecturally Leaking Uninitialized Data from the Microarchitecture
ÆPIC Leak is the first CPU bug able to architecturally disclose sensitive data. It leverages a vulnerability in recent Intel CPUs to leak secrets from the processor itself: on most 10th, 11th and 12th generation Intel CPUs the APIC MMIO undefined range incorrectly returns stale data from the cache hierarchy .
In contrast to transient execution attacks like Meltdown and Spectre , ÆPIC Leak is an architectural bug : the sensitive data gets directly disclosed without relying on any (noisy) side channel.
Michael Schwarz @ CISPA Helmholtz Center for Information Security
Andreas Kogler