Apple chips can be hacked to leak secrets from Gmail, iCloud, and more

FLOP abuses the LVP in a way that allows the attacker to run functions with the wrong argument—for instance, a memory pointer rather than an integer.

is this a vulnerability in the software? So patching this won't require disabling speculative execution?