Apple to patch SLAP and FLOP web browser vulnerabilities
Apple plans to patch two new speculative execution attacks, SLAP and FLOP, that impact recent Apple chips, according to data shared today by Georgia Tech students who discovered the vulnerabilities.
Several Apple A-series and M-series chips are affected, including the A15 and later and the M2 and later, which are found in the following:
• 2022 and later Mac notebooks
• 2023 and later Mac desktops
• 2021 and later iPad models
• 2021 and later iPhones
Apple told Bleeping Computer that it has not yet patched the flaws. “We want to thank the researchers for their collaboration as this proof of concept advances our understanding of these types of threats,” Apple said. “Based on our analysis, we do not believe this issue poses an immediate risk to our users.”
SLAP affects Safari, while FLOP affects Safari and Chrome. Other browsers like Firefox could be affected too, but have not been tested. There is no evidence that SLAP and FLOP have been executed in the wild.
MacDailyNews Note: More info about how SLAP and FLOP work can be found here.
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!
Support MacDailyNews at no extra cost to you by using this link to shop at Amazon.
The post Apple to patch SLAP and FLOP web browser vulnerabilities appeared first on MacDailyNews.
