NVIDIA DGX Spark GB10 Vulnerability in SROOT Firmware
CVE-2025-33200

2.3LOW

Key Information:

Vendor

Nvidia
Status
Dgx Spark
Vendor
CVE Published:
25 November 2025

What is CVE-2025-33200?

The NVIDIA DGX Spark GB10 contains a resource reuse vulnerability in its SROOT firmware. An attacker exploiting this issue could potentially gain unauthorized access to sensitive information by forcing a resource to be reused. This type of vulnerability raises serious concerns for data integrity and confidentiality, making it crucial for users to apply remediation measures promptly.

Affected Version(s)

DGX Spark NVIDIA DGX OS All versions prior to OTA0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33200
https://www.cve.org/CVERecord?id=CVE-2025-33200
https://nvidia.custhelp.com/app/answers/detail/a_id/5720

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.