Skip to content
OpenAdvisories
High · 7.5 CVE-2023-25506 EUVD-2023-29458GHSA-wh7f-qrp8-9qqv

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause …

Published Apr 22, 2023 · Updated Feb 4, 2025 · Assigned by nvidia

Description

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components.

Affected products

VendorProductAffectedFixed
NVIDIA NVIDIA DGX servers All SBIOS prior to S2W_3A13 —

References