PT-2023-20119 · Nvidia +1 · Nvidia Dgx-1 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 affected versions not specified Description: The issue is related to a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer. This...

NVIDIA GPU Display Driver 安全漏洞

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to interactively support graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver, which arises from a security issue in the kernel mode layer handler that could resu...

PT-2023-6807 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to a vulnerability in the wksServicePlugin.dll library of the NVIDIA GPU Display Driver for Windows. This vulnerability is caused by the...

PT-2023-8257 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a vulnerability in the host KVM daemon of the NVIDIA DGX A100 BMC, where an unauthenticated attacker can cause stack memory corruption by sending a...

CVE-2023-0209: Improper Authentication

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, denial of service, escalation of privileges assisted by a firmware implant, information disclosure assisted by a firmware...

CVE-2023-0199: Out-of-bounds Write

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can lead to denial of service and data tampering...

CVE-2023-25512: Out-of-bounds Read

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited...

CVE-2023-25505: Buffer Copy without Checking Size of Input

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution...

PT-2023-6810 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Windows and Linux affected versions not specified Description: The issue is related to a NULL-pointer dereference in the Virtual GPU Manager vGPU plugin of the NVIDIA vGPU software, which can lead to denial of service...

CVE-2023-0204: Improper Check or Handling of Exceptional Conditions

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...

CVE-2023-0184: Untrusted Pointer Dereference

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2023-0200: Access of Memory Location After End of Buffer

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure...

CVE-2023-0206: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure...

NVIDIA CUDA Toolkit 数字错误漏洞

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. The software supports the development, optimization and deployment of applications installed on GPU-accelerated embedded systems, desktop workstations, enterprise data...

NVIDIA DGX-2 安全漏洞

The NVIDIA DGX-2 is a high-performance workstation for deep learning from NVIDIA, Inc. The NVIDIA DGX-2™ is NVIDIA's first 2 petaFLOPS appliance to integrate 16 NVIDIA V100 Tensor core GPUs, making it an excellent platform for tackling complex AI challenges. A security vulnerability exists in...

CVE-2023-0203: Insufficient Granularity of Access Control

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS that originates from an attacker being able to modify arbitrary memory in SMRAM using the GenericSio and LegacySmmSredir SMM APIs, which could resu...

PT-2023-8264 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue is related to an integer overflow that allows a local attacker to bypass input validation checks. A successful exploit may lead to denial of service, information...

PT-2023-8265 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue is related to a transition to System Management Mode SMM due to an SMI interruption, which can be exploited to gain read, modify, or delete access to data, elevate...

PT-2023-8262 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue is related to incorrect dynamic variable analysis, which may allow a user to cause a dynamic variable evaluation by local access. A successful exploit of this issue...