NVIDIA DGX Spark GB10 Vulnerability in SROOT Firmware
CVE-2025-33200

2.3LOW

Key Information:

Vendor

Nvidia
Status
Dgx Spark
Vendor
CVE Published:
25 November 2025

What is CVE-2025-33200?

The NVIDIA DGX Spark GB10 contains a resource reuse vulnerability in its SROOT firmware. An attacker exploiting this issue could potentially gain unauthorized access to sensitive information by forcing a resource to be reused. This type of vulnerability raises serious concerns for data integrity and confidentiality, making it crucial for users to apply remediation measures promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

DGX Spark NVIDIA DGX OS All versions prior to OTA0

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33200
https://www.cve.org/CVERecord?id=CVE-2025-33200
https://nvidia.custhelp.com/app/answers/detail/a_id/5720

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.