CVE-2022-28200

HIGH Year: 2022
CVSS v3 Score
8.2
High
CVSS v2 Score
4.6
Medium
Weakness Type
CWE-119
View all →

Vulnerability Description

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components.

Related Vulnerabilities

CVE-2015-2546

HIGH
CVSS:8.2(High)

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows ...

CWE-1192015

CVE-2016-2176

HIGH
CVSS:8.2(High)

The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process stack memory or cause a d...

CWE-1192016

CVE-2016-3142

HIGH
CVSS:8.2(High)

The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denia...

CWE-1192016

CVE-2016-3947

HIGH
CVSS:8.2(High)

Heap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in Squid before 3.5.16 and 4.x before 4.0.8 allows remote servers to cause a denial of service (performanc...

CWE-1192016

CVE-2016-3994

HIGH
CVSS:8.2(High)

The GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (application crash) or obtain sensitive information via a crafted image, which triggers an out-of-bounds read...

CWE-1192016

CVE-2018-12214

HIGH
CVSS:8.2(High)

Potential memory corruption in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5...

CWE-1192018