CVE-2025-33187

Published: Nov 25, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of privileges.

Affected (1)

Products: Nvidia: Dgx Os

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nvidia Dgx Os	All versions

Running on/with	Platform Versions
Nvidia Dgx Spark	All versions

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-33187

Source: psirt@nvidia.com

Third Party Advisory

https://nvidia.custhelp.com/app/answers/detail/a_id/5720

Source: psirt@nvidia.com

Vendor Advisory

https://www.cve.org/CVERecord?id=CVE-2025-33187

Source: psirt@nvidia.com

Third Party Advisory

Timeline

No history available yet.