NVIDIA has released security updates to address fourteen critical vulnerabilities in its DGX Spark system.
These flaws could allow attackers to execute malicious code, steal sensitive information, and launch denial-of-service attacks that crash the system.
The vulnerabilities affect all versions of NVIDIA DGX OS before the latest OTA0 update.
| CVE ID | Severity | CVSS Score | Potential Impact |
|---|---|---|---|
| CVE-2025-33187 | Critical | 9.3 | Code execution, privilege escalation, data tampering, denial of service |
| CVE-2025-33188 | High | 8.0 | Information disclosure, data tampering, denial of service |
| CVE-2025-33189 | High | 7.8 | Code execution, privilege escalation, denial of service |
| CVE-2025-33190 | Medium | 6.7 | Code execution, privilege escalation, denial of service |
| CVE-2025-33191 | Medium | 5.7 | Denial of service |
| CVE-2025-33192 | Medium | 5.7 | Code execution, denial of service, information disclosure |
| CVE-2025-33193 | Medium | 5.7 | Code execution, denial of service, information disclosure |
| CVE-2025-33194 | Medium | 5.7 | Information disclosure, denial of service |
| CVE-2025-33195 | Medium | 4.4 | Data tampering, denial of service, privilege escalation |
| CVE-2025-33196 | Medium | 4.4 | Information disclosure |
| CVE-2025-33197 | Medium | 4.3 | Code execution, denial of service |
| CVE-2025-33198 | Low | 3.3 | Information disclosure |
| CVE-2025-33199 | Low | 3.2 | Data tampering |
| CVE-2025-33200 | Low | 2.3 | Information disclosure |
The most serious vulnerability, CVE-2025-33187, has a critical severity rating and a CVSS score of 9.3 out of 10.
This flaw in the SROOT component allows attackers with privileged access to bypass system protections.
Successful exploitation could result in complete code execution, granting attackers control over the DGX Spark device.
The vulnerability also enables attackers to escalate their privileges, tamper with data, and disrupt service availability.
A second critical concern is CVE-2025-33188, which affects hardware resource controls.
Attackers exploiting this vulnerability could tamper with the DGX Spark system’s physical hardware settings, potentially causing information leaks, data corruption, and system shutdowns.
This flaw scores 8.0 on the severity scale, placing it in the High category.
Several additional vulnerabilities involve memory-related issues in the SROOT firmware.
CVE-2025-33189 and CVE-2025-33190 describe out-of-bound write flaws that could allow attackers to write data outside safe memory areas, leading to code execution and system compromise.
Both vulnerabilities enable privilege escalation, meaning attackers can gain higher-level access to the system.
Other notable vulnerabilities include arbitrary memory read issues, NULL pointer dereferences, and integrity validation failures.
While some of these carry lower severity scores, they can still be combined with other exploits or used as stepping stones in multi-stage attacks.
CVE-2025-33192, for example, allows attackers to read arbitrary memory locations, potentially exposing confidential data like encryption keys or authentication credentials.
The vulnerabilities were discovered internally by NVIDIA’s Offensive Security Research team, suggesting the issues were identified before public disclosure.
This discovery highlights the importance of robust internal security testing for hardware and firmware components.
NVIDIA strongly recommends that all DGX Spark users immediately download and install the OTA0 update from the official NVIDIA DGX product page.
This patch addresses all fourteen vulnerabilities in a single unified update. Organizations using DGX Spark systems should prioritize this update to prevent potential exploitation by threat actors.
The vulnerabilities underscore the growing security challenges in AI and machine learning infrastructure.
As these systems become more critical to business operations, securing their firmware and hardware components becomes increasingly important.
Users should also enable any available security monitoring and access controls to limit exposure until patches can be applied.
For ongoing security information, NVIDIA users can subscribe to security bulletin notifications through the NVIDIA Product Security page and report any suspected vulnerabilities through the official channels.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…