CVE-2018-19322 The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to re...
HighCVSS 7.8
EPSS 1.8%
CISA KEV
added 2022-10-24 · due 2022-11-14
Ransomware
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
CISA Known Exploited Vulnerability
- Date added
- 2022-10-24
- Due date (FCEB)
- 2022-11-14
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gigabyte aorus graphics engine | < 1.57 | 1.57 |
| gigabyte app center | <= 1.05.21 | No fix listed |
| gigabyte oc guru ii | = 2.08 | No fix listed |
| gigabyte xtreme gaming engine | < 1.26 | 1.26 |
References
- 20181221 [CORE-2018-0007] - GIGABYTE Driver Elevation of Privilege Vulnerabilities exploit mailing-list third-party-advisory
- www.secureauth.com broken-link exploit third-party-advisory
- 106252 broken-link third-party-advisory vdb-entry
- www.gigabyte.com product
- www.gigabyte.com vendor-advisory
- www.cisa.gov government-resource us-government-resource