Skip to main content

Vendor archive

nvidia CVEs

Beta · best-effort

797 CVEs tagged to vendor nvidia30 Critical, 455 High, 270 Medium, 42 Low, 0 Unrated.

CVE-2023-25507

Published Apr 22, 2023

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to…

CVSS 7.2 · High
Vendor/product tagsBeta · best-effort

CVE-2023-25506

Published Apr 22, 2023

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, wh…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2023-25505

Published Apr 22, 2023

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, w…

CVSS 7.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0209

Published Apr 22, 2023

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may lead to arbitrary code execution, deni…

CVSS 8.2 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0207

Published Apr 22, 2023

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulne…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0206

Published Apr 22, 2023

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. A successful exploit of this vulnerability ma…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0202

Published Apr 22, 2023

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful explo…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0201

Published Apr 22, 2023

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code executio…

CVSS 6.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-0200

Published Apr 22, 2023

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code executi…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0195

Published Apr 1, 2023

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Informatio…

CVSS 2.0 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-0189

Published Apr 1, 2023

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, inform…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-0187

Published Apr 1, 2023

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of service.

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2023-0186

Published Apr 1, 2023

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service and data tampering.

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort
Showing 301-325 of 797 CVEsPage 13 of 32