An issue exists in gdrv.sys in Gigabyte APP Center prior to 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
gigabyte app center |
Vulmon