Attacking NPUs of Multiple Platforms
summary
Audit and firmware-reverse work finds concrete flaws in Exynos, Apple NPU and Qualcomm drivers: stable double free in Exynos mailbox handling, multiple time‑of‑check/time‑of‑use double‑fetches in model parsing, and an Android kernel race that yields list‑delete/double‑free primitives on Snapdragon. Demonstrations load modified firmware into DMA buffers to run shellcode on the NPU, and a cross‑slab exploit plus dirty page table technique turns a freed command object into an arbitrary read/write leading to Android root on Samsung devices. Patches fix checks and single‑fetch consensus.
AI-written summary · about
chapters (9)
- 0:00Introduction to MPUs
- 0:35Neural network basics
- 6:01Samsung Exynos MPU analysis
- 9:47Mailbox and DMA structure
- 13:39Exynos exploitation
- 19:58Apple Neural Engine attacks
- 23:18Snapdragon MPU driver
- 28:26Exploiting Snapdragon
- 34:43Conclusion and Q&A
related talks
36mDancing with Exynos Coprocessor: Pwning Samsung for fun and “profit”
42mThe Hidden RCE Surfaces That Control the Droids
44mDeep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019
45mThe Art of Exploiting Unconventional Use-after-free Bugs in Android Kernel
37mEternal War in XNU Kernel Objects
25mKill Latest MPU-based Protections in Just One Shot: Targeting All Commodity RTOSes
50mFinding Vulnerabilities In iOS/MacOS Networking Code
36mPhysical Attacks Against Smartphones