CVE-2025-33190: High severity Nvidia DGX Spark vulnerability
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or escalation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-33190?
CVE-2025-33190 is considered a high severity vulnerability due to its potential impact on code execution and privilege escalation.
How do I fix CVE-2025-33190?
To mitigate CVE-2025-33190, update the SROOT firmware on NVIDIA DGX Spark to the latest version provided by NVIDIA.
What could happen if CVE-2025-33190 is exploited?
Exploitation of CVE-2025-33190 could lead to code execution, data tampering, denial of service, or escalation of privileges.
Who is affected by CVE-2025-33190?
The vulnerability affects NVIDIA DGX Spark systems that utilize the SROOT firmware.
When was CVE-2025-33190 disclosed?
CVE-2025-33190 was disclosed in 2025, specifically addressing vulnerabilities found in NVIDIA DGX Spark.