GCVE - cpe:2.3:a:gigabyte:app_center:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gigabyte:app_center:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gigabyte (`2e35ccd7-7053-5ff9-8ddb-f6fc948ecf12`)
Product	App Center (`01b82713-ec2f-562f-abdb-05af464eafb4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-7630`	vulnerable	2026-06-08 05:14:14.597826	Details available An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges. Published: 2020-03-25T16:59:12.000Z Updated: 2024-08-04T20:54:28.409Z Open on db.gcve.eu Reference links https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2019-0003/FEYE-2019-0003.md https://www.gigabyte.com/Support/Security/1801	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19322`	vulnerable	2026-06-08 05:11:15.622355	Details available The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges. Published: 2018-12-21T23:00:00.000Z Updated: 2025-10-21T23:45:45.244Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2018/Dec/39 https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities http://www.securityfocus.com/bid/106252 https://www.gigabyte.com/tw/Support/Utility/Graphics-Card https://www.gigabyte.com/Support/Security/1801	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19321`	vulnerable	2026-06-08 05:11:15.621699	Details available The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges. Published: 2018-12-21T23:00:00.000Z Updated: 2025-10-21T23:45:45.399Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2018/Dec/39 https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities http://www.securityfocus.com/bid/106252 https://www.gigabyte.com/Support/Security/1801	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19320`	vulnerable	2026-06-08 05:11:15.619617	Details available The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system. Published: 2018-12-21T23:00:00.000Z Updated: 2025-10-21T23:45:45.601Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2018/Dec/39 https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities http://www.securityfocus.com/bid/106252 https://www.gigabyte.com/tw/Support/Utility/Graphics-Card https://www.gigabyte.com/Support/Security/1801	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.