Deathray Browser Attack Proves Mac GPU Drivers Are Still Vulnerable
It appears a vulnerability exists within MacOS's WebGPU implementation that can crash a system with a few simple commands, Auberon López (aka @auberonedu on GitHub) revealed this week.
Auberon's day job is as an instructor at the Green River College in Auburn, Washington, but Auberon still found time to document and detail "Deathray" on an interactive web page that includes a working demonstration of the vulnerability.
So, what exactly is Deathray doing that can freeze a Mac system? It's forcing a shader through the WebGPU driver that contains an infinite loop, which copies the same vector over and over. What happens next can vary from losing input, to getting the loading "beach ball," to magenta GPU artifacts appearing onscreen. Eventually, the issues trigger a kernel panic that restarts the Mac.
Deathray is an obvious flaw in MacOS' WebGPU implementation, and discussion indicates that this bug has been documented since 2011.
...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE