CVE-2019-7245

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0

published March 25, 2020

CVSS
—
EPSS
3%
Percentile
84.6
In the wild
Unconfirmed
What it is

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02506 · 84.6th percentile
Published
2020-03-25T16:35Z
EPSS history
Timeline
  • 25 MAR 16:35Z
    An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0
    cvelistv5