← CVE Intelligence

CVE-2022-31602

NVIDIA / NVIDIA DGX A100 PUBLISHED

Description (CNA)

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure.

Affected (CNA)

Vendor / productVersions
NVIDIA / NVIDIA DGX A100affected Versions prior to 22.5.5

CWE

CWE-787

References

ADP enrichment

CVE

No English description supplied.