Main
Vulnerability Database
Exploits
ID:9463 - Exploit for Privilege escalation in GIGABYTE Global products - CVE-2018-19320
ID:9463 - Exploit for Privilege escalation in GIGABYTE Global products - CVE-2018-19320
Published: December 27, 2023
Vulnerability identifier: #VU16621
Vulnerability risk: Low
CVE-ID: CVE-2018-19320
CWE-ID: CWE-782
Exploitation vector: Local access
Vulnerable software:
GIGABYTE APP Center
AORUS GRAPHICS ENGINE
XTREME GAMING ENGINE
OC GURU
GIGABYTE APP Center
AORUS GRAPHICS ENGINE
XTREME GAMING ENGINE
OC GURU
Link to public exploit:
Vulnerability description
The vulnerability allows a local unauthenticated attacker to gain elevated privileges on the target device.
The weakness exists due to ring0 memcpy-like functionality built into GIO's IOCTL 0xC3502808. A local attacker can gain elevated privileges.
Remediation
Cybersecurity Help is currently unaware of any official solution addressing the vulnerability.