CVE-2026-24225
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could cause an out-of-bounds read. Successful exploitation might lead to information disclosure.
Risk Assessment
Risk of disclosure of sensitive information stored in system memory, potentially aiding further attacks.
Recommendation
Install firmware updates provided by NVIDIA for DGX Spark.
Other vulnerabilities in NVIDIA DGX Spark
See all- CVE-2026-47626High
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
- CVE-2026-47624Medium
NVIDIA DGX Spark contains a vulnerability in UEFI where a privileged local user can cause a CWE-693, potentially allowing bypass of administrator password protection in UEFI. Successful exploitation may allow an attacker to bypass password protections.
- CVE-2026-24263High
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
- CVE-2026-24262High
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.
Original NVD description (English source)
NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure.