Critical · published December 22, 2018
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 95.0th percentile for exploit probability.
🔥 A vulnerability in GIGABYTE's drivers allows attackers to read and write sensitive Machine Specific Registers (MSRs) directly — and it’s been exploited in the wild! Think of MSRs as the secret diary of your computer's hardware — it contains all the juicy details about how your system runs. If someone can read and write to that diary, they could change the very way your machine operates, like a rogue editor rewriting your favorite book! The stakes are high! An attacker could manipulate system settings, gain elevated privileges, or even take control of your entire machine. This could lead to data breaches, system instability, or worse — total system compromise!
Think of MSRs as the secret diary of your computer's hardware — it contains all the juicy details about how your system runs. If someone can read and write to that diary, they could change the very way your machine operates, like a rogue editor rewriting your favorite book! This flaw resides in the GDrv low-level driver of GIGABYTE APP Center and associated software, allowing unauthorized access to critical hardware registers. By exploiting this vulnerability, an attacker can alter machine behavior and performance, bypassing normal security controls.
The stakes are high! An attacker could manipulate system settings, gain elevated privileges, or even take control of your entire machine. This could lead to data breaches, system instability, or worse — total system compromise! Immediate action is crucial! Ensure you update GIGABYTE APP Center to the latest version (v1.05.22 or later) and update AORUS GRAPHICS ENGINE, XTREME GAMING ENGINE, and OC GURU II to their respective patched versions. Additionally, review system logs for any suspicious activity related to this exploit. You've got this! With these updates, you’ll lock down your system tighter than a drum! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gigabyte/aorus_graphics_engine | < 1.57 | 1.57 |
| gigabyte/gigabyte_app_center | ≤ 1.05.21 | — |
| gigabyte/oc_guru_ii | all versions | — |
| gigabyte/xtreme_gaming_engine | < 1.26 | 1.26 |