Collected research

Grand Pwning Unit: Accelerating Microarchitectural Attacks with the GPU

Pietro Frigo, Cristiano Giuffrida, Herbert Bos and Kaveh Razavi · download.vusec.net

Integrated mobile GPUs, reachable from JavaScript through WebGL, supply the primitives for microarchitectural attacks: precise timers, a side channel over the GPU cache, and control over physical memory. The authors reverse engineer the Adreno 330 cache and mount the first reliable Rowhammer bit flips from a mobile browser, compromising a phone in under two minutes.

Record

Researcher

Pietro Frigo, Cristiano Giuffrida, Herbert Bos and Kaveh Razavi

Published by

download.vusec.net

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2018 research round

Related sources

• Grand Pwning Unit: Accelerating Microarchitectural Attacks with the GPU

Tags

• side-channel
• timing-attack
• javascript
• android
• sandbox-escape

This page is the archive's own catalogue record. The research is the work of Pietro Frigo, Cristiano Giuffrida, Herbert Bos and Kaveh Razavi, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 12 August 2026.