Skip to content
OpenAdvisories
Medium · 6.6 CVE-2023-31034 EUVD-2023-35371GHSA-r2x9-77mc-c6x6

CVE

Published Jan 12, 2024 · Updated Jun 17, 2025 · Assigned by nvidia

Description

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
nvidia DGX A100 All SBOIS versions prior to 1.25 —

References