CVE-2018-19320: GIGABYTE Multiple Products Unspecified Vulnerability
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
Other sources
The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19320?
CVE-2018-19320 is considered a high severity vulnerability that allows local attackers to gain complete control of affected systems.
How do I fix CVE-2018-19320?
To fix CVE-2018-19320, you should upgrade to the latest versions of the affected GIGABYTE software components as mentioned in the security advisory.
Which GIGABYTE products are affected by CVE-2018-19320?
CVE-2018-19320 affects GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, and other related software versions.
Can CVE-2018-19320 be exploited remotely?
No, CVE-2018-19320 requires local access for exploitation, making it necessary for the attacker to have physical or authorized local access to the system.
What kind of attack can be performed using CVE-2018-19320?
An attacker exploiting CVE-2018-19320 can execute arbitrary code with elevated privileges, potentially leading to full system compromise.