Vulnerability Details CVE-2025-33190
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or escalation of privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.0%
CVSS Severity
CVSS v3 Score 6.7
Products affected by CVE-2025-33190
-
cpe:2.3:h:nvidia:dgx_spark:-
-
cpe:2.3:o:nvidia:dgx_os:*