Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-25521

CVE-2023-25521

Description

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA DGX A100/A800

Default version status: unaffected

  • All SBIOS versions prior to 1.21affected

References