CVE-2025-33199
Severity
3.8LOW
EPSS
0.0%
top 95.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 25
Description
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:NExploitability: 1.5 | Impact: 1.4
Affected Packages1 packages
🔴Vulnerability Details
2CVEList▶
CVE-2025-33199: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior↗2025-11-25
GHSA▶
GHSA-vw24-hhmf-xp64: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior↗2025-11-25