CVE-2023-25506 (published 2023-04-22T02:30:26.791Z)
NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components.
Affected products: Vendor: NVIDIA
Product: NVIDIA DGX servers
Versions: All SBIOS prior to S2W_3A13