A vulnerability has been discovered in some of Apple’s silicon graphics processors that could allow attackers to access sensitive data.

A recent investigation by cybersecurity firm Trail of Bits revealed a security flaw called “LeftoverLocals” that allows attackers with local access to a device to obtain data processed in local GPU memory. This issue is of particular concern due to the increasing use of GPUs in large language model (LLM) processing for AI applications.

According to the company, the vulnerability allows an attacker to eavesdrop on another user’s interactive LLM session and access potentially sensitive information. Apple said wiredNew devices with A17 Pro and M3 chips have received a patch to fix this flaw, and Trail of Bits has found that the third-generation iPad Air has also received a patch.

Many older models with vulnerable GPUs are still vulnerable, including the iPhone 12 and M2 MacBook Air. While Apple has taken steps to fix certain devices, it’s not yet clear if and when all models in question will receive a security update that will directly address the issue.

The nature of the LeftoverLocals vulnerability is such that it requires physical access to the device, making remote exploitation extremely unlikely. As always, Apple encourages users to install the latest software update available to receive security fixes.