Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-31035

CVE

Description

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nvidia DGX A100

Default version status: unaffected

  • All SBOIS versions prior to 1.25affected

References