Actively exploited in the wild
GIGABYTE Multiple Products Privilege Escalation Vulnerability
GIGABYTE - Multiple Products · Listed in the CISA KEV since 2022-10-24. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2018-19321
HighCVSS 7.8KEVExploitation Probability (EPSS)
High risk89th percentile - higher than 89% of all known CVEs
Summary
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center and other tools expose functionality to read and write arbitrary physical memory. A local attacker could leverage this to elevate privileges.
Risk Assessment
A local attacker could gain access to physical memory, potentially leading to full system compromise and data breach.
Recommendation
Update GIGABYTE software to versions that fix these drivers, or restrict access to systems with these drivers.
Other vulnerabilities in GIGABYTE APP Center
See all- CVE-2018-19323CriticalActively exploited
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
- CVE-2018-19322HighActively exploited
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center and other tools expose functionality to read/write data from/to IO ports. This could be leveraged to run code with elevated privileges.
- CVE-2018-19320HighActively exploited
The GDrv low-level driver in GIGABYTE APP Center and other tools exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
Original NVD description (English source)
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS