CVE-2025-33190

Medium CVSS: 6.7

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or escalation of privileges.

Vendor

Nvidia

Product

Dgx Os

CWE

CWE-787

Yayın Tarihi

2025-11-25 18:15:50

Güncelleme

2025-12-02 18:19:45

Source Identifier

psirt@nvidia.com

KEV Date Added

Kategoriler

CWE-787 Dgx Os MEDIUM Nvidia 2025

Referanslar

https://nvd.nist.gov/vuln/detail/CVE-2025-33190 https://nvidia.custhelp.com/app/answers/detail/a_id/5720 https://www.cve.org/CVERecord?id=CVE-2025-33190

Benzer Kayıtlar

High

CVE-2026-24165

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful explo…

Medium

CVE-2026-24153

NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful ex…

High

CVE-2026-24154

NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorre…

High

CVE-2026-24164

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful explo…

High

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker co…

High

CVE-2026-24159

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit o…