mc-imperial / shader-compiler-bugs

A collection of shader compiler bugs.
MIT License
49 stars 9 forks source link

WebGL shader leaks VRAM data #80

Closed paulthomson closed 7 years ago

paulthomson commented 7 years ago

[Shaders, screenshots, error log, reproduction steps, platform info, etc.] [ZIP]

This shader appears to cause VRAM data to be output. This allows a malicious WebGL web page to capture and upload the contents of other browser tabs in Chrome and the stock browser.

Here is an example of an image captured by our proof-of-concept malicious web page. The image shows the contents of another browser tab that was showing a banking web page.

captured image

We have not included the shader files.

paulthomson commented 7 years ago

Cannot reproduce on the latest update for the S6.