CVE-2023-25506: NVIDIA Sbios

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer, which may lead to code execution, escalation of privileges, denial of service and information disclosure. The scope of the impact of this vulnerability can extend to other components.

Affected products

• NVIDIA Sbios: before 52w_3a13 (fixed in 52w_3a13)

Published 2023-04-22. Last modified 2026-06-17.