It appears that the bit flipping attack known as RowHammer can be used to read protected memory.