CVE-2023-25513: Out-of-bounds Read

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution,...

CVE-2023-25506: Access of Memory Location After End of Buffer

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of t...

CVE-2023-0190: NULL Pointer Dereference

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service...

CVE-2023-25509: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges...

CVE-2023-25510: NULL Pointer Dereference

NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary may cause a limited denial of service...

NVIDIA DGX-1 授权问题漏洞

The NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in the NVIDIA DGX-1 SBIOS Uncore PEI prior to version 23.04.01, which stems from a lack of authentication of SSA execution code and could lead to arbitrary code...

PT-2023-16085 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue allows an attacker to modify arbitrary memory of SMRAM by exploiting the NVME SMM API, potentially leading to denial of service, escalation of privileges, and...

PT-2023-16068 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the kernel mode layer handler, which may lead to denial of service, escalation of privileges, information...

PT-2023-6811 · Nvidia · Nvidia Gpu Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Driver for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the kernel mode layer of the NVIDIA GPU Driver, where an unprivileged regular user can cause a NULL-pointer...

PT-2023-7241 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to an uncontrolled search path element in the NVIDIA GPU Display Driver for Windows during its update process. This can allow an attacker ...

PT-2023-6814 · Nvidia · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to a vulnerability in the kernel mode layer of the NVIDIA Virtual GPU driver, which is associated with inadequate access control. This...

PT-2023-6809 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the Virtual GPU Manager vGPU plugin of the NVIDIA vGPU software, where a malicious user in the guest VM can cau...

PT-2023-6812 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue allows an attacker to write arbitrary data to privileged locations by using reparse points. A successful exploit may lead to code execution, denial o...

PT-2023-8260 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a stack overflow vulnerability in the host KVM daemon of the NVIDIA DGX A100 BMC. An unauthenticated attacker can exploit this by sending a specially...

PT-2023-8258 · Nvidia · Nvidia Dgx A100

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 baseboard management controller BMC affected versions not specified Description: The issue is related to a stack overflow vulnerability in the host KVM daemon of the NVIDIA DGX A100 baseboard management controller BMC. An...

PT-2023-16088 · Nvidia · Nvidia Dgx-1 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 SBIOS affected versions not specified Description: The issue is related to a missing authentication of the code executed by SSA in the Uncore PEI module, which may lead to arbitrary code execution, denial of service, escalation o...

PT-2023-16086 · Nvidia · Nvidia Dgx-2 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-2 SBIOS affected versions not specified Description: The issue allows an attacker to modify the ServerSetup NVRAM variable at runtime by executing privileged code, potentially leading to denial of service. Recommendations: At the...

PT-2023-20121 · Nvidia · Nvidia Dgx-1 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 BMC affected versions not specified Description: The issue is related to the IPMI handler in the NVIDIA DGX-1 BMC, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certai...

PT-2023-20122 · Nvidia · Nvidia Dgx-1 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 SBIOS affected versions not specified Description: The issue is related to a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. Recommendations: At the moment, there is no...

PT-2023-20118 · Ami +1 · Ami Megarac Bmc +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 BMC affected versions not specified Description: The issue is related to a buffer overflow in the IPMI handler of the AMI MegaRAC BMC. An attacker with the appropriate level of authorization can cause this buffer overflow,...