Out-of-Bounds Write Vulnerability in NVIDIA DGX A100

CVE-2022-31602

What is CVE-2022-31602?

The NVIDIA DGX A100 features a vulnerability within its System BIOS (SBIOS) in the IpSecDxe module. This flaw permits a user with elevated privileges to exploit a preconditioned heap scenario, resulting in an out-of-bounds write condition. Exploiting this vulnerability could allow unauthorized code execution, lead to denial of service situations, compromise data integrity, and cause potential information disclosure.

References