VYPR
Unrated severityNVD Advisory· Published Jan 13, 2023· Updated Apr 7, 2025

CVE-2022-42281

CVE-2022-42281

Description

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.

Affected products

2
  • Nvidia/DGX A100llm-create
  • NVIDIA/NVIDIA DGX serversv5
    Range: All SBIOS firmware versions prior to 1.18

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.