CVE-2023-31031

CVE

State
Published
Severity
4.2 Medium
Published
Jan 12, 2024
Updated
Oct 9, 2025
Reserved
Apr 22, 2023

Read the record on cve.org

Description

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.

Scores

CVSSScoreVectorSource
3.14.2 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:Lnvidia

Weaknesses

Affected Products

ProductVersions
DGX A100nvidia
  • All SBOIS versions prior to 1.25Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.