CVE-2019-7630 An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specif...
HighCVSS 7.2
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gigabyte app center | < 19.0227.1 | 19.0227.1 |
References
- github.com exploit third-party-advisory
- www.gigabyte.com patch vendor-advisory