CVE-2018-19322

GIGABYTE low-level drivers in multiple products allowed remote code execution via IO port access, leading to ransomware exploitation.

GIGABYTE's GPCIDrv and GDrv drivers in App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II exposed IO port read/write functionality, enabling elevated privilege code execution. This vulnerability was actively exploited in the wild and linked to ransomware, meaning DIB organizations using GIGABYTE hardware must verify patching status and monitor for supply-chain compromises. The failure is avoidable through timely patching and highlights the risk of unpatched, exploited-in-wild vulnerabilities in widely deployed hardware.

Shame score — A critical, actively exploited vulnerability in widely deployed hardware drivers that enabled ransomware attacks, demonstrating severe negligence in patch management and supply-chain security.