Read the docs
TI-2023-10832 Aliases CVE-2023-25527GHSA-4g2v-p7fm-xrqm

Memory corruption in NVIDIA DGX H100 BMC

Priority LOW 35CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00201 10th percentileScored 2026-11-07
Fix Fixed DGX H100 BMC (NVIDIA): 23.08.07

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NVIDIADGX H100 BMCbefore 23.08.0723.08.07Patch availableCNA
  • DGX H100 BMC VendorNVIDIA Affected before 23.08.07 Fixed in 23.08.07 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:nvidia:dgx_h100_firmware:*:*:*:*:bmc:*:*:*before 23.08.18VulnerableNVIDIA
cpe:2.3:h:nvidia:dgx_h100:-:*:*:*:*:*:*:*not specified by NVDRunning onNVIDIA
  • cpe:2.3:o:nvidia:dgx_h100_firmware:*:*:*:*:bmc:*:*:* Versions before 23.08.18 Vulnerable ·NVIDIA
  • cpe:2.3:h:nvidia:dgx_h100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NVIDIA

Remediation

  • Fix · CNA DGX H100 BMC (NVIDIA) Fixed in 23.08.07

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-25527
  2. 2026-10-03 Alias added: GHSA-4g2v-p7fm-xrqm

References

Advisory 1

  • TI-2023-10838 Improper input validation in NVIDIA DGX H100 BMC CVSS 3.1CRITICAL 9.8
  • TI-2023-10835 Improper input validation in NVIDIA DGX H100 BMC CVSS 3.1CRITICAL 9.8
  • TI-2023-10833 Stack-based buffer overflow in NVIDIA DGX H100 BMC CVSS 3.1CRITICAL 9.8
  • TI-2023-14746 Improper input validation in NVIDIA DGX H100 BMC CVSS 3.1CRITICAL 9.8
  • TI-2023-10839 Improper input validation in NVIDIA DGX H100 BMC CVSS 3.1CRITICAL 9.8
  • TI-2023-10836 Insufficiently protected credentials in NVIDIA DGX H100 BMC CVSS 3.1CRITICAL 9.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences