NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure.
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bmc | Nvidia | * | 1.08.00 (excluding) |