Out-of-Bound Write Vulnerability in NVIDIA DGX Spark GB10 Firmware

CVE-2025-33189

What is CVE-2025-33189?

The NVIDIA DGX Spark GB10 firmware has a vulnerability that allows for an out-of-bound write, enabling potential attacks that could lead to various exploits. If successfully executed, these attacks can result in unauthorized code execution, data manipulation, denial of service, information exposure, or privilege escalation. Organizations using affected versions must prioritize updates and security measures to mitigate the risks associated with this vulnerability.

References