CVE-2018-19322: GIGABYTE Multiple Products Code Execution Vulnerability
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
Other sources
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19322?
CVE-2018-19322 has a high severity due to potential exploitation that can lead to unauthorized access to IO ports.
How do I fix CVE-2018-19322?
To mitigate CVE-2018-19322, upgrade GIGABYTE App Center to version 1.05.22 or later, AORUS Graphics Engine to version 1.57 or later, Xtreme Gaming Engine to version 1.26 or later, and OC Guru II to version 2.09 or later.
Which GIGABYTE products are affected by CVE-2018-19322?
CVE-2018-19322 affects GIGABYTE App Center versions up to 1.05.21, AORUS Graphics Engine versions before 1.57, Xtreme Gaming Engine versions before 1.26, and OC Guru II version 2.08.
What kind of vulnerabilities does CVE-2018-19322 expose?
CVE-2018-19322 exposes vulnerabilities that allow read/write access to IO ports, which could be leveraged for various forms of attacks.
Is there a specific version I need to avoid for CVE-2018-19322?
Yes, ensure that you are not using GIGABYTE App Center versions earlier than 1.05.22, AORUS Graphics Engine versions earlier than 1.57, Xtreme Gaming Engine versions earlier than 1.26, and OC Guru II version 2.08.