CVE-2018-19320 GIGABYTE Multiple Products Unspecified
A local attacker can exploit ring0 memory access in GIGABYTE utilities to gain complete system control.
- Exploited in the wild
- Since 24 Oct 2022
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-19320?
CVE-2018-19320 is a high-severity vulnerability in n/a, published on 21 Dec 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
Which versions are affected by CVE-2018-19320?
It affects 4 products.
Products include Gigabyte Aorus Graphics Engine, Gigabyte App Center, Gigabyte Oc Guru Ii, Gigabyte Xtreme Gaming Engine.
How do I fix CVE-2018-19320?
No fix has been published for CVE-2018-19320 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 14 Nov 2022.
Is CVE-2018-19320 being exploited?
Yes. Attackers have exploited CVE-2018-19320 in the wild since at least 24 Oct 2022, including in ransomware campaigns.
Public exploit code: 3 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wg2v-fx2j-3jrr.