DGX A100 SBIOS: Buffer overflow in SBIOS

CVSS 4.2CVE-2023-31031NVIDIA / GPU stackcurated

Impact

Buffer overflow in SBIOS

Who can reach it

Local operator

What to do

Flash SBIOS 1.25+; node power cycle

References

https://nvd.nist.gov/vuln/detail/CVE-2023-31031 https://github.com/NVIDIA/product-security/tree/main/2024/5513

Related entries

DGX A100 SBIOS: Improper crypto config / UI-layer restriction in SBIOSCVE-2023-31032 · DGX A100 SBIOSHigh
DGX A100 SBIOS: Improper input validation in SBIOSCVE-2023-31035 · DGX A100 SBIOSHigh
DGX A100 SBIOS: Integer overflow in SBIOSCVE-2023-31034 · DGX A100 SBIOSMedium
Mellanox OS / MetroX / Onyx / Skyway: Improper access control on switch mgmtCVE-2024-0104 · Mellanox OS / MetroX / Onyx / SkywayMedium
CUDA Toolkit: Code exec potential (buffer overflow)CVE-2025-23275 · CUDA ToolkitMedium
NVIDIA HGX / DGX (Hopper and Blackwell) - GPU VBIOS: A VBIOS misconfiguration lets an attacker set an unsafe GPU debugCVE-2025-23301 · NVIDIA HGX / DGX (Hopper and Blackwell) - GPU VBIOSMedium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.