Vulnerabilities > Gigabyte

DATE CVE VULNERABILITY TITLE RISK
2020-03-25 CVE-2019-7630 Improper Initialization vulnerability in Gigabyte APP Center 1.05.21
An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1.
network
low complexity
gigabyte CWE-665
7.2
2018-12-21 CVE-2018-19323 Unspecified vulnerability in Gigabyte products
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).
network
low complexity
gigabyte
critical
9.8
2018-12-21 CVE-2018-19322 Exposed Dangerous Method or Function vulnerability in Gigabyte products
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports.
local
low complexity
gigabyte CWE-749
7.8
2018-12-21 CVE-2018-19321 Unspecified vulnerability in Gigabyte products
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory.
local
low complexity
gigabyte
7.8
2018-12-21 CVE-2018-19320 Unspecified vulnerability in Gigabyte products
The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.
local
low complexity
gigabyte
7.8
2018-07-09 CVE-2017-3198 Missing Encryption of Sensitive Data vulnerability in Gigabyte Gb-Bsi7H-6500 Firmware and Gb-Bxi7-5775 Firmware
GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware.
network
low complexity
gigabyte CWE-311
critical
9.8
2018-07-09 CVE-2017-3197 Improper Input Validation vulnerability in Gigabyte Gb-Bsi7H-6500 Firmware and Gb-Bxi7-5775 Firmware
GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely implement BIOSWE, BLE, SMM_BWP, and PRx features.
network
low complexity
gigabyte CWE-20
critical
9.8