CVE-2018-19322

🗓️ 21 Dec 2018 00:00:00Reported by AttackerKBType

GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 low-level drivers allow for elevated privilege code execution via IO port access

Reporter	Title	Published	Views	Family All 19
BDU FSTEC	The vulnerabilities of the GPCIDrv and GDrv drivers allow attackers to execute arbitrary code. These drivers are used by the Gigabyte Aorus Engine video card configuration program, the GIGABYTE App Center for application management, and the Extreme Gaming Engine for video card status monitoring.	7 Nov 202200:00	–	bdu_fstec
Circl	CVE-2018-19322	14 Jun 202321:10	–	circl
CISA KEV Catalog	GIGABYTE Multiple Products Code Execution Vulnerability	24 Oct 202200:00	–	cisa_kev
CNVD	Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products (CNVD-2018-26458)	25 Dec 201800:00	–	cnvd
CVE	CVE-2018-19322	21 Dec 201823:00	–	cve
Cvelist	CVE-2018-19322	21 Dec 201823:00	–	cvelist
EUVD	EUVD-2018-11020	7 Oct 202500:30	–	euvd
Tenable Nessus	GIGABYTE AORUS GRAPHICS ENGINE < 1.57 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus
Tenable Nessus	GIGABYTE APP Center < 19.4.22.1 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus
Tenable Nessus	GIGABYTE OC GURU II 2.08 Multiple Vulnerabilities	11 Jan 202300:00	–	nessus

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securityfocus	www.securityfocus.com/bid/106252
seclists	www.seclists.org/fulldisclosure/2018/Dec/39
gigabyte	www.gigabyte.com/tw/Support/Utility/Graphics-Card
gigabyte	www.gigabyte.com/Support/Security/1801
secureauth	www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities

21 Oct 2025 00:00Current

3.3Low risk

Vulners AI Score3.3

CVSS 24.6

CVSS 3.17.8

EPSS0.01801

SSVC