Skip to content
OpenAdvisories
Medium · 4.2 CVE-2023-31031 EUVD-2023-35368GHSA-xjhp-vgwg-948r

CVE

Published Jan 12, 2024 · Updated Oct 9, 2025 · Assigned by nvidia

Description

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
nvidia DGX A100 All SBOIS versions prior to 1.25 —

References