CVE-2018-19323

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

• http://seclists.org/fulldisclosure/2018/Dec/39Exploit
• http://www.securityfocus.com/bid/106252Broken Link
• https://www.gigabyte.com/Support/Security/1801Vendor Advisory
• https://www.gigabyte.com/tw/Support/Utility/Graphics-CardProduct
• https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilitiesBroken Link
• http://seclists.org/fulldisclosure/2018/Dec/39Exploit
• http://www.securityfocus.com/bid/106252Broken Link
• https://www.gigabyte.com/Support/Security/1801Vendor Advisory
• https://www.gigabyte.com/tw/Support/Utility/Graphics-CardProduct
• https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilitiesBroken Link
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19323US Government Resource