← Database

CVE-2022-31602

MEDIUM CVSS: 6.4 Published: 2022-07-04 Modified: 2026-06-17

Description

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure.

Affected Platforms

Nvidia Dgx A100Nvidia Dgx A100 Firmware

Weakness Type

CWE-787, CWE-787

References