ZeroDay Findings
Sign inSign up

Findings

CVE-2018-19320

GIGABYTE Multiple Products Unspecified Vulnerability

Published Dec 21, 2018 · updated Aug 12, 2026 · gigabyte aorus graphics engine

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 21, 2018 · Catalog

    Detected

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

  2. Oct 24, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Nov 14, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 12, 2026 · Catalog

    Updated

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

Required action

Apply updates per vendor instructions.

CISA due date Nov 14, 2022

Affected

  • cpe gigabyte/aorus graphics engineversion unspecified
  • cpe gigabyte/app centerversion unspecified
  • cpe gigabyte/oc guru ii2.08
  • cpe gigabyte/xtreme gaming engineversion unspecified
  • vendor GIGABYTE Multiple Productsversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2018-19320

    The GDrv low-level driver in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2018-19320

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2018-19320

    30-day exploitation probability 3.6%

    first.org
  • NIST NVDVulnerability recordCVE-2018-19320

    The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected syst

    nvd.nist.gov

References

CVE-2018-19320 · ZeroDay Findings