- Vendor / Project
- GIGABYTE
- Product
- Multiple Products
- Date added
- Oct 24, 2022
- Due date
- Nov 14, 2022
- Known ransomware use
- Known
- CWEs
- —
Description
The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
Required action
Apply updates per vendor instructions.