Skip to content
OpenAdvisories
High · 7.8 CVE-2025-33189 EUVD-2025-199624GHSA-f83q-jrfh-gq6m

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit…

Published Nov 25, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure, or escalation of privileges.

Affected products

VendorProductAffectedFixed
NVIDIA DGX Spark All versions prior to OTA0 —

Advisories 1

References