PT-2018-3843 · Gigabyte · Gigabyte App Center+4

Diego Juarez · Published 2018-12-21 · Updated 2025-08-28 · CVE-2018-19320

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GIGABYTE APP Center versions 1.05.21 and earlier AORUS GRAPHICS ENGINE versions prior to 1.57 XTREME GAMING ENGINE versions prior to 1.26 OC GURU II version 2.08 and earlier GIGABYTE Multiple Products (affected versions not specified)

Description The issue is related to insufficient access control in the GDrv driver, which is part of various GIGABYTE programs, including Aorus Engine, GIGABYTE App Center, and Extreme Gaming Engine. This could allow an attacker to execute arbitrary code, potentially taking complete control of the affected system. The vulnerability is associated with the low-level driver in these applications, exposing ring0 memcpy-like functionality.

Recommendations For GIGABYTE APP Center versions 1.05.21 and earlier, update to a version later than 1.05.21. For AORUS GRAPHICS ENGINE versions prior to 1.57, update to version 1.57 or later. For XTREME GAMING ENGINE versions prior to 1.26, update to version 1.26 or later. For OC GURU II version 2.08 and earlier, update to a version later than 2.08. As a temporary workaround, consider restricting access to the GDrv driver until a patch is available.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2022-06640

CVE-2018-19320

Affected Products

Aorus Graphics Engine

Aorus Engine

Gigabyte App Center

Oc Guru Ii

Xtreme Gaming Engine

References · 22

• 🔥 https://github.com/zer0condition/GDRVLoader · Exploit
• 🔥 https://github.com/ASkyeye/CVE-2018-19320 · Exploit
• 🔥 https://github.com/hmnthabit/CVE-2018-19320-LPE · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Dec/39 · Exploit
• 🔥 https://secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19320 · Security Note
• https://bdu.fstec.ru/vul/2022-06640 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19320 · Vendor Advisory
• https://twitter.com/fletch_ai/status/1722118522086535356 · Twitter Post
• https://gigabyte.com/Support/Utility/Motherboard · Note
• https://twitter.com/fletch_ai/status/1734786988857835938 · Twitter Post
• https://t.me/aptreports/21203 · Telegram Post
• https://t.me/cvenotify/114824 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-19320 · Note
• https://gigabyte.com/Support/Security/1801 · Vendor Advisory, Security Note