← Database

CVE-2023-25521

HIGH CVSS: 7.5 Published: 2023-07-04 Modified: 2026-06-17

Description

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.

Affected Platforms

Nvidia Dgx A100Nvidia Dgx A800 FirmwareNvidia Dgx A800Nvidia Dgx A100 Firmware

Weakness Type

CWE-250, CWE-269

References