Firetruck

CVE-2018-19322

KEV · Ransomware

GIGABYTE Multiple Products Code Execution Vulnerability

View CVE record →
Vendor / Project
GIGABYTE
Product
Multiple Products
Date added
Oct 24, 2022
Due date
Nov 14, 2022
Known ransomware use
Known
CWEs
CWE-749

Description

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.

Required action

Apply updates per vendor instructions.

Notes