CVE-2018-19320

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability affects the GDrv low-level driver shipped with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before version 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08. It exposes ring-0 memcpy-like functionality that can be invoked directly from user mode, granting arbitrary kernel-memory read and write primitives on the affected Windows systems.

A local attacker with low privileges can load or communicate with the driver to abuse these primitives, achieving arbitrary code execution at ring 0 and thereby obtaining complete control of the system, including the ability to disable security controls, read or modify any process, and persist across reboots. The issue carries a CVSS 3.1 base score of 7.8 and requires no user interaction beyond the ability to execute code in the context of an authenticated local user.

Gigabyte published security advisory 1801 along with updated driver packages on its support site; the SecureAuth Labs advisory and the full-disclosure posting on Seclists provide additional technical detail and proof-of-concept references for verifying remediation status.