Own a GIGABYTE motherboard? Update the Control Center software now as multiple ...

Those with a GIGABYTE motherboard in their PC should be aware of a fresh vulnerability in the company's Control Center software that requires action now.

PC Gamer noticed the security advisory which was posted warning vulnerabilities in the drivers relating to the GIGABYTE Control Center app.

There are "multiple security vulnerabilities" in GVCIDrv64.sys and gdrv3.sys, we're told, and you should update to the latest version of the Control Center which has them patched.

GIGABYTE notes: "The vulnerabilities exist in the kernel drivers' IOCTL interfaces. Due to insufficient access control and improper validation of input parameters, authenticated local attackers can perform unauthorized operations, including arbitrary physical memory mapping and direct hardware access."

The end result could be a "complete system compromise" GIGABYTE advises, but there is some good news here which you likely spotted - the local aspect.

This isn't a vulnerability that can be exploited remotely; rather, it requires the attacker to be local, limiting the potential damage here.

Still, it's not a flaw that you want to have on your PC, so you should update the GIGABYTE Control Center software as soon as you can.

The version you need with the relevant security fixes is the GIGABYTE Control Center v26.08.28.01.

GIGABYTE credits two individuals for helping discover and stamp out this flaw, and apparently Mohamed Alzhrani (0xMaz) and Subhan Sultanov (me1n) have been "invaluable in developing a swift and effective response".

Frequently Asked Questions

Open a question for an answer from TweakTown's coverage of this news, or ask your own below.

How do I check whether my GIGABYTE Control Center install is on version v26.08.28.01 or older?

Do GVCIDrv64.sys and gdrv3.sys get updated automatically with Control Center, or do they need a separate fix?

Can this vulnerability be exploited remotely, or does an attacker need local access first?

What kinds of malicious actions were possible through the Control Center kernel driver flaws?

Have a question that isn't listed here? Ask below, and TweakBot will answer it.

This security issue has a CVSS (Common Vulnerability Scoring System) rating of 8.8 (out of 10), meaning it's a high risk in terms of the level of access that could be leveraged via an exploit.

Join the TweakTown for daily tech updates delivered to your inbox.

See giveaways .

Follow TweakTown for breaking tech news, reviews, and daily updates.

Hundreds of GIGABYTE motherboards affected by BIOS vulnerability, updates are available

NVIDIA issues Security Bulletin for GeForce users, so make sure you've updated your driver

Intel Z890 motherboards and Arrow Lake CPUs reportedly have serious issues with Windows 11 24H2

Microsoft sets a Patch Tuesday record with 206 fixes, and finally patches every zero-day Nightmare Eclipse disclosed

Extra features for Windows 11 Notepad go beyond worries bloat, as new security flaw shows