Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-31031

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.

Published

2024-01-12T19:15:10.257

Last Modified

2024-11-21T08:01:17.060

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.2 (MEDIUM)

Weaknesses

Type: Secondary
CWE-122
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	nvidia	dgx_a100_firmware	< 1.25	Yes
Hardware	nvidia	dgx_a100	-	No

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5510 Vendor Advisory ([email protected])
https://nvidia.custhelp.com/app/answers/detail/a_id/5510 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)