DGX A100 SBIOS: Improper input validation in SBIOS

CVSS 7.5CVE-2023-31035NVIDIA / GPU stackcurated

Impact

Improper input validation in SBIOS

Who can reach it

Local operator

What to do

Flash SBIOS 1.25+

References

https://nvd.nist.gov/vuln/detail/CVE-2023-31035 https://github.com/NVIDIA/product-security/tree/main/2024/5510

Related entries

DGX A100 SBIOS: Integer overflow in SBIOSCVE-2023-31034 · DGX A100 SBIOSMedium
DGX A100 SBIOS: Buffer overflow in SBIOSCVE-2023-31031 · DGX A100 SBIOSMedium
DGX A100 SBIOS: Improper crypto config / UI-layer restriction in SBIOSCVE-2023-31032 · DGX A100 SBIOSHigh
Triton Inference Server: RCE / privesc / data tampering via model-load path traversal (`--model-control explicit`)CVE-2023-31036 · Triton Inference ServerHigh
Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu): A NULL pointer dereference in the amdgpuCVE-2023-52883 · Linux kernel amdgpu GEM/VM/command-submission ioctl surface (drm/amdgpu)High
ChatRTX: Local privescCVE-2024-0096 · ChatRTXHigh

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.