PT-2025-48056 · Nvidia · Dgx Spark Gb10

Published 2025-11-25 · Updated 2025-12-02 · CVE-2025-33195

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark GB10

Description The NVIDIA DGX Spark GB10 contains a flaw in the SROOT firmware that could allow an attacker to trigger unexpected memory buffer operations. Exploitation of this issue may result in data tampering, denial of service, or privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2025-14848

CVE-2025-33195

Affected Products

Dgx Spark Gb10

References · 9

• https://nvidia.custhelp.com/app/answers/detail/a_id/5720 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-33195 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-33195 · Security Note
• https://bdu.fstec.ru/vul/2025-14848 · Security Note
• https://twitter.com/VulmonFeeds/status/1993412147351605733 · Twitter Post
• https://twitter.com/CVEnew/status/1993385785027182735 · Twitter Post
• https://t.me/CVEtracker/38202 · Telegram Post
• https://t.me/cveNotify/144550 · Telegram Post
• https://1275.ru/vulnerability/kriticheskie-uyazvimosti-v-nvidia-dgx-spark-ugrozy-vypolneniya-koda-i-dos-atak_16689 · Note