Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

TI-2025-24134 CVE-2025-33197 · GHSA-r9v6-9429-66g9

NULL pointer dereference in NVIDIA DGX Spark

Priority LOW 24

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2025-11-25 No fix listed CWE-476
TI-2025-24132 CVE-2025-33195 · GHSA-c92j-gx9r-6644

Memory corruption in NVIDIA DGX Spark

Priority LOW 35

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00158 Published 2025-11-25 No fix listed CWE-119
Priority LOW 25

NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read.

CVSS 3.1MEDIUM 5.7 Local No auth No interaction EPSS 0.00175 Published 2025-11-25 No fix listed CWE-20
TI-2025-24127 CVE-2025-33190 · GHSA-rx36-mr4j-6x6g

Out-of-bounds write in NVIDIA DGX Spark

Priority LOW 35

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00169 Published 2025-11-25 No fix listed CWE-787
TI-2025-24126 CVE-2025-33189 · GHSA-f83q-jrfh-gq6m

Out-of-bounds write in NVIDIA DGX Spark

Priority LOW 35

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00192 Published 2025-11-25 No fix listed CWE-787
Priority LOW 34

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls.

CVSS 3.1HIGH 8.0 Local No auth No interaction EPSS 0.00168 Published 2025-11-25 No fix listed CWE-269
Priority MEDIUM 41

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00182 Published 2025-11-25 No fix listed CWE-269