GIGABYTE · Multiple Products

CVE-2018-19321

GIGABYTE Multiple Products Privilege Escalation Vulnerability

Exploited in attacks Used by ransomware High 7.8 Attack chance: 3.7%

What it is

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

CISA: The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: November 14, 2022

Added to the CISA list: October 24, 2022
Published: December 21, 2018
Severity: High 7.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 3.7% in the top 10.3% of all known vulnerabilities
More details: NVD · CVE.org · CISA

All references (4)

More exploited flaws from GIGABYTE

Added	Vulnerability	Product	Severity	Attack chance
Oct 24, 2022	UnspecifiedCVE-2018-19320used by ransomware	Multiple Products	High 7.8	4.6%
Oct 24, 2022	Code ExecutionCVE-2018-19322used by ransomware	Multiple Products	High 7.8	1.8%
Oct 24, 2022	Privilege EscalationCVE-2018-19323used by ransomware	Multiple Products	Critical 9.8	8.4%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.