← Database

CVE-2025-33189

HIGH CVSS: 7.8 Published: 2025-11-25 Modified: 2026-06-17

Description

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure, or escalation of privileges.

Affected Platforms

Nvidia Dgx SparkNvidia Dgx Os

Weakness Type

CWE-787

References