Vulnerabilities CVE-2018-19321

CVE-2018-19321

Medium

Open

KEV

TLP:CLEAR

GIGABYTE Multiple Products Privilege Escalation Vulnerability

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

Details

EPSS Score ⓘ: 3.67%

88.6th percentile
Confidence: 100%
Published: Dec 21, 2018
Last Modified: Aug 13, 2026
CISA KEV
Date Added: Oct 24, 2022
Patch Due: Nov 14, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.