NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.
Advisories
Source ID Title
EUVD EUVD EUVD-2023-35368 NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Thu, 09 Oct 2025 19:30:00 +0000

Type Values Removed Values Added
Description NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering. NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.

Tue, 17 Jun 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: nvidia

Published:

Updated: 2025-10-09T19:13:55.867Z

Reserved: 2023-04-22T02:38:33.413Z

Link: CVE-2023-31031

cve-icon Vulnrichment

Updated: 2024-08-02T14:45:25.286Z

cve-icon NVD

Status : Modified

Published: 2024-01-12T19:15:10.257

Modified: 2025-10-09T20:15:34.963

Link: CVE-2023-31031

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.