CVE-2019-7245

HIGH

TechPowerUp GPU-Z < 2.23.0 - Privilege Escalation via Unfiltered MSR Write IOCTL

Title source: llm
STIX 2.1

Description

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

References (1)

Core 1

Scores

CVSS v3 7.2
EPSS 0.0241
EPSS Percentile 81.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-665
Status published
Products (1)
techpowerup/gpu-z < 2.23.0
Published Mar 25, 2020
Tracked Since Feb 18, 2026