CVE-2025-33198

CWE-2264 documents4 sources
Severity
3.3LOW
EPSS
0.0%
top 94.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia DGX Spark
Timeline
PublishedNov 25

Description

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages1 packages

▶CVEListV5nvidia/dgx_sparkAll versions prior to OTA0

🔴Vulnerability Details

2
GHSA
GHSA-hmmf-h566-h9vj: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused↗2025-11-25
▶
CVEList
CVE-2025-33198: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused↗2025-11-25
▶

📋Vendor Advisories

1
Microsoft
In Go before 1.15.13 and 1.16.x before 1.16.5 there can be a panic for a large exponent to the math/big.Rat SetString or UnmarshalText method.↗2021-08-10
▶
CVE-2025-33198 (LOW CVSS 3.3) | NVIDIA DGX Spark GB10 contains a vu | cvebase.io