CVE-2025-33187
CriticalSummary
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker with privileged access could gain access to SoC protected areas. Successful exploitation might lead to code execution, information disclosure, data tampering, denial of service, or privilege escalation.
Risk Assessment
An attacker with privileged access can take control of the system, leading to compromise of data confidentiality, integrity, and availability.
Recommendation
Apply security updates provided by NVIDIA and restrict privileged access to the system.
Original NVD description (English source)
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of privileges.