CVE-2023-31034 MEDIUM

CVE-2023-31034: CVE

Vendor Nvidia
Product DGX A100
Weakness CWE-190
Published January 12, 2024
Last update June 17, 2025

CVSS base score

6.6/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H

What the vulnerability does

01Description

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.

Key dates

02Disclosure timeline

January 12, 2024 CVE published
June 17, 2025 Record updated