High severity7.5NVD Advisory· Published Apr 22, 2023· Updated Jun 17, 2026
CVE-2023-25506
CVE-2023-25506
Description
NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components.
Affected products
2- Range: All SBIOS prior to S2W_3A13
Patches
Vulnerability mechanics
References
1- nvidia.custhelp.com/app/answers/detail/a_id/5458nvdVendor Advisory
News mentions
0No linked articles in our index yet.