Memory Read Vulnerability in NVIDIA DGX Spark GB10
CVE-2025-33191

5.7MEDIUM

Key Information:

Vendor

Nvidia
Status
Dgx Spark
Vendor
CVE Published:
25 November 2025

What is CVE-2025-33191?

The NVIDIA DGX Spark GB10 is impacted by a vulnerability within its OSROOT firmware, which allows an attacker to exploit an invalid memory read. This could potentially result in a denial of service, disrupting normal operations and affecting system availability. Users of the DGX Spark GB10 should be aware of this issue and consider taking steps to mitigate the risks associated with this vulnerability.

Affected Version(s)

DGX Spark NVIDIA DGX OS All versions prior to OTA0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33191
https://www.cve.org/CVERecord?id=CVE-2025-33191
https://nvidia.custhelp.com/app/answers/detail/a_id/5720

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-33191 : Memory Read Vulnerability in NVIDIA DGX Spark GB10