CVE-2018-19321 is a critical vulnerability affecting GIGABYTE APP Center, AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE, and OC GURU II. It allows local attackers to achieve arbitrary physical memory read/write capabilities due to insecure low-level drivers. This vulnerability carries a high CVSS score of 7.8, indicating a significant risk of privilege escalation to full system control. Notably, it is actively exploited, including in known ransomware campaigns, and has garnered substantial community discussion and media coverage, despite a lack of public exploit code.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.57CPE matchmatch criteria | cpe:2.3:a:gigabyte:aorus_graphics_engine:*:*:*:*:*:*:*:* | ||
< 19.0422.1CPE matchmatch criteria | cpe:2.3:a:gigabyte:app_center:*:*:*:*:*:*:*:* | ||
2.08CPE matchmatch criteria | cpe:2.3:a:gigabyte:oc_guru_ii:2.08:*:*:*:*:*:*:* | ||
< 1.26CPE matchmatch criteria | cpe:2.3:a:gigabyte:xtreme_gaming_engine:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.