Nvidia Dgx Spark Uefi vulnerabilities

CVE-2026-24262 [HIGH] CWE-787 CVE-2026-24262: NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47626 [HIGH] CWE-787 CVE-2026-47626: NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-24263 [HIGH] CWE-476 CVE-2026-24263: NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47624 [MEDIUM] CWE-693 CVE-2026-47624: NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privile NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi.

CVE-2026-24225 [MEDIUM] CWE-125 CVE-2026-24225: NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be a NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure.