CVE-2018-19321

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability affects low-level kernel drivers GPCIDrv and GDrv shipped with GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before version 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08. These drivers expose IOCTL interfaces that permit arbitrary physical memory read and write operations from user mode. The issue received a CVSS 3.1 base score of 7.8 and is tracked without a specific CWE.

A local attacker who can load or communicate with the affected drivers can directly manipulate physical memory contents. This capability is sufficient to overwrite kernel structures, inject code into privileged processes, or otherwise escalate from a standard user account to SYSTEM-level privileges on the host.

Vendor advisories published by GIGABYTE and independent analysis from SecureAuth Labs recommend updating to patched driver versions that remove or restrict the exposed memory-access functionality. The updates are referenced in GIGABYTE security bulletin 1801 and the corresponding Full Disclosure entry. No public evidence of in-the-wild exploitation has been noted in the available references.