CVE-2018-19320

CVE-2018-19320 concerns the GDrv low-level driver used by GIGABYTE APP Center and related tools (AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, OC GURU II v2.08). The vulnerability exposes ring0 memcpy-like functionality that could let a local attacker gain full control of t...

CVE-2018-19321

CVE-2018-19321 affects GIGABYTE GPCIDrv and GDrv low-level drivers in APP Center (and related tools) that expose functionality to read/write arbitrary physical memory. The root cause is insufficient input control in the drivers, enabling a local attacker to elevate privileges. Affected products/v...

CVE-2018-19322

The CVE-2018-19322 issue affects GIGABYTE APP Center and related components (GDrv; GPCIDrv; AORUS GRAPHICS ENGINE; XTREME GAMING ENGINE; OC GURU II) with IO port read/write access exposed by these low‑level drivers. The documented impact is local privilege elevation via arbitrary IO port operatio...

CVE-2019-7630

CVE-2019-7630 affects Gigabyte APP Center prior to 19.0227.1. The gdrv.sys driver exposes wrmsr via IOCTL 0xC3502580 and fails to properly filter MSR targets, allowing arbitrary MSR writes that can lead to Ring-0 code execution and privilege escalation. Public sources in the connected documents c...