---
id: 1563
title: "[CVE-2023-4969] LeftoverLocals: Listening to LLM responses through leaked GPU local memory"
cve: CVE-2023-4969
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/01/16/leftoverlocals-listening-to-llm-responses-through-leaked-gpu-local-memory/"
published_at: "2024-01-16T17:00:39Z"
tags: ["ai-security", "llm", "gpu", "vulnerability-disclosure", "machine-learning", "side-channel", "trail-of-bits", "memory-leak", "cve-2023-4969"]
phying_url: "https://phying.com/item/1563"
lang: en
---

# [CVE-2023-4969] LeftoverLocals: Listening to LLM responses through leaked GPU local memory

## Summary

LeftoverLocals (CVE-2023-4969) lets a co-resident attacker recover GPU local memory data on Apple, Qualcomm, AMD, and Imagination GPUs — enough to reconstruct LLM responses across process boundaries.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **CVE:** CVE-2023-4969
- **Published:** 2024-01-16T17:00:39Z
- **Original:** https://blog.trailofbits.com/2024/01/16/leftoverlocals-listening-to-llm-responses-through-leaked-gpu-local-memory/
- **Phying News:** https://phying.com/item/1563