Executive brief
The GDrv low-level driver in multiple GIGABYTE utilities exposes ring0 memcpy-like functionality. This allows a local attacker to execute arbitrary code with kernel privileges, potentially leading to complete system takeover.
Affected products
- GIGABYTE APP Center v1.05.21 and earlier
- GIGABYTE AORUS GRAPHICS ENGINE before 1.57
- GIGABYTE XTREME GAMING ENGINE before 1.26
- GIGABYTE OC GURU II v2.08
Timeline
- 2018-12-18: disclosed: Public disclosure via Seclists Full Disclosure
- 2022-10-24: kev added: Added to CISA Known Exploited Vulnerabilities Catalog