{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:02:48Z","timestamp":1782975768033,"version":"3.54.5"},"reference-count":49,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62572432"],"award-info":[{"award-number":["62572432"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00078","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"472-488","source":"Crossref","is-referenced-by-count":0,"title":["Demystifying and Exploiting ASLR on NVIDIA GPUs"],"prefix":"10.1109","author":[{"given":"Ruofan","family":"Zhu","sequence":"first","affiliation":[{"name":"Zhejiang University,Hangzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ganhao","family":"Chen","sequence":"additional","affiliation":[{"name":"Zhejiang University,Hangzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenbo","family":"Shen","sequence":"additional","affiliation":[{"name":"Zhejiang University,Hangzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lyuye","family":"Zhang","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dakun","family":"Shen","sequence":"additional","affiliation":[{"name":"Zhejiang University,Hangzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rui","family":"Chang","sequence":"additional","affiliation":[{"name":"Zhejiang University,Hangzhou,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanan","family":"Guo","sequence":"additional","affiliation":[{"name":"University of Rochester,Rochester,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"0x5ec1ab. gpu-tlb\/extractor","year":"2025"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/HPEC55821.2022.9926299"},{"key":"ref3","author":"Andrysiak","journal-title":"Why variables in thread\u2019s block have the same memory address? cuda, 2021. Stack Overflow, Question ID: 66368478"},{"key":"ref4","volume-title":"Open webui: Userfriendly ai interface (supports ollama, openai api,\u2026)","author":"Baek","year":"2025"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690239"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/roedunet60162.2023.10274918"},{"key":"ref7","volume-title":"Gp100 mmu format","year":"2024"},{"key":"ref8","volume-title":"Open gpu kernel modules","year":"2024"},{"key":"ref9","volume-title":"Linux memory management types header file","author":"Developers","year":"2024"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.3390\/engproc2021007026"},{"key":"ref11","volume-title":"Nvidia vs. amd discrete gpu market share (2010 to 2024)","author":"Douglas","year":"2025"},{"key":"ref12","first-page":"15","article-title":"Hoda Naghibijouybari, Nael Abu-Ghazaleh, Andres Marquez, and Kevin Barker","volume-title":"Leaky buddies: Cross-component covert channels on integrated cpu-gpu systems. In Proceedings of the 2021 ACM\/IEEE 48th Annual International Symposium on Computer Architecture (ISCA)","author":"Baran Dutta"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2017.37"},{"key":"ref14","article-title":"and ggml-org contributors","volume-title":"llama","author":"Gerganov","year":"2025"},{"key":"ref15","volume-title":"ggml org. Issue \\#8798: [title of the issue]","year":"2025"},{"key":"ref16","article-title":"Gisbert and Ismael Ripoll","author":"Marco","year":"2016","journal-title":"Exploiting linux and pax aslr\u2019s weaknesses on 32-bit and 64-bit systems"},{"key":"ref17","first-page":"4033","article-title":"GPU memory exploitation for fun and profit","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Guo"},{"key":"ref18","author":"Hoover","year":"2022","journal-title":"Analysis of gpu memory vulnerabilities"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-89432-0_23"},{"key":"ref20","article-title":"Dissecting the nvidia turing t4 gpu via microbenchmarking","author":"Jia","year":"2019","journal-title":"arXiv preprint"},{"key":"ref21","article-title":"Dissecting the nvidia volta gpu architecture via microbenchmarking","author":"Jia","year":"2018","journal-title":"arXiv preprint"},{"key":"ref22","year":"2025","journal-title":"kokol16. Gpu illegal memory access in kernel densetocsrsparsematrix"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00027"},{"issue":"1","key":"ref24","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1214\/aoms\/1177729694","volume":"22","author":"Kullback","year":"1951","journal-title":"On information and sufficiency. The Annals of Mathematical Statistics"},{"key":"ref25","volume-title":"Kuterd. nv isa solver","year":"2024"},{"issue":"1","key":"ref26","first-page":"94","article-title":"Barker","volume":"31","author":"Li","year":"2019","journal-title":"Evaluating modern gpu interconnect: Pcie, nvlink, nv-sli, nvswitch and gpudirect"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3390\/app9142928"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-015-0251-1"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-018-0039-0"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243831"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453077"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/1120.003.0065"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3503222.3507779"},{"key":"ref34","volume-title":"Cuda c programming guide","year":"2023"},{"key":"ref35","year":"2020","journal-title":"CVE-2020\u20135991: NVIDIA NVJPEG library Out-of-Bounds READ\/Write Vulnerability"},{"key":"ref36","year":"2022","journal-title":"Chapter 42. GSP Firmware - NVIDIA Driver Documentation (Version 510.39.01)"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102115"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC\/SmartCity\/DSS.2019.00088"},{"key":"ref39","first-page":"537","article-title":"Varsha Venugopal, and Jim AlvesFoss","volume":"1","author":"Gogineni Ravindrababu","year":"2021","journal-title":"Analysis of firmware security mechanisms"},{"key":"ref40","article-title":"Powershell script to restart ollama on crash, close or frozen","author":"Rickman","year":"2024"},{"key":"ref41","first-page":"40","article-title":"Cuda, woulda, shoulda:Returning exploits in a sass-y world","volume-title":"Proceedings of the 18th European Workshop on Systems Security, EuroSec\u201925","author":"Roels"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s00450-011-0157-1"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"ref44","article-title":"Leftoverlocals: Listening to llm responses through leaked gpu local memory","author":"Sorensen","year":"2024","journal-title":"arXiv preprint"},{"key":"ref45","article-title":"Pax: The guaranteed end of arbitrary code execution","author":"Spengler","year":"2003","journal-title":"G-Con2: Mexico City, Mexico"},{"key":"ref46","year":"2025","journal-title":"Address space layout randomization"},{"key":"ref47","volume-title":"Illegal memory access resulted from pointwise autotuning of a cat-like kernel","year":"2024"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD56317.2022.00108"},{"key":"ref49","article-title":"TunneLs for Bootlegging: Fully Reverse-Engineering GPU TLBs for Challenging Isolation Guarantees of NVIDIA MIG","volume-title":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, CCS \u201923","author":"Zhang","year":"2023"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573432.pdf?arnumber=11573432","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:36:45Z","timestamp":1782970605000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573432\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":49,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00078","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}