CVE-2018-19322 is a high-severity vulnerability affecting GIGABYTE APP Center, AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE, and OC GURU II. It allows low-level drivers to expose read/write access to IO ports, which can be leveraged by a local attacker with low privileges to achieve arbitrary code execution with elevated privileges. This vulnerability has a CVSS score of 7.8 and is actively exploited, including in known ransomware campaigns, as indicated by its presence in the KEV catalog. Despite active exploitation, no public exploit code is available on platforms like Metasploit or ExploitDB, though it has garnered significant community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.57CPE matchmatch criteria | cpe:2.3:a:gigabyte:aorus_graphics_engine:*:*:*:*:*:*:*:* | ||
<= 1.05.21CPE matchmatch criteria | cpe:2.3:a:gigabyte:app_center:*:*:*:*:*:*:*:* | ||
2.08CPE matchmatch criteria | cpe:2.3:a:gigabyte:oc_guru_ii:2.08:*:*:*:*:*:*:* | ||
< 1.26CPE matchmatch criteria | cpe:2.3:a:gigabyte:xtreme_gaming_engine:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.