CVE-2023-31034

CVE

State
Published
Severity
6.6 Medium
Published
Jan 12, 2024
Updated
Jun 17, 2025
Reserved
Apr 22, 2023

Read the record on cve.org

Description

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.

Scores

CVSSScoreVectorSource
3.16.6 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:Hnvidia

Weaknesses

Affected Products

ProductVersions
DGX A100nvidia
  • All SBOIS versions prior to 1.25Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.