PT-2025-48053 · Nvidia · Nvidia Dgx Spark Gb10

Published 2025-11-25 · Updated 2025-11-25 · CVE-2025-33192

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark GB10 (affected versions not specified)

Description An issue exists in the SROOT firmware of NVIDIA DGX Spark GB10 that could allow an attacker to cause an arbitrary memory read. Exploitation of this issue may lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-690

Related Identifiers

BDU:2025-14845

CVE-2025-33192

Affected Products

Nvidia Dgx Spark Gb10

References · 7

• https://bdu.fstec.ru/vul/2025-14845 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5720 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-33192 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-33192 · Security Note
• https://1275.ru/vulnerability/kriticheskie-uyazvimosti-v-nvidia-dgx-spark-ugrozy-vypolneniya-koda-i-dos-atak_16689 · Note
• https://t.me/CVEtracker/38199 · Telegram Post
• https://twitter.com/CVEnew/status/1993385787757674821 · Twitter Post