CVE-2018-19322VulnerabilityPublished 10/24/2022Updated 10/24/2026
CVE-2018-19322: GIGABYTE Multiple Products Code Execution Vulnerability
Affects GIGABYTE Multiple ProductsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 10/24/2022
- KEV deadline
- 11/14/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 1.8% chance of exploitation in 30 days – higher than 78% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.