Skip to content
OpenAdvisories
Medium · 4.4 CVE-2025-33195 EUVD-2025-199625GHSA-c92j-gx9r-6644

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A succ…

Published Nov 25, 2025 · Updated Feb 26, 2026 · Assigned by nvidia

Description

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exploit of this vulnerability might lead to data tampering, denial of service, or escalation of privileges.

Affected products

VendorProductAffectedFixed
NVIDIA DGX Spark All versions prior to OTA0 —

Advisories 1

References