CVE 9.3 CRITICAL

CVE-2025-33187_CVE-2025-33187

November 25, 2025 invoker category_cve

9.3 / 10

CRITICAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of privileges.

AI Analysis

Privilege escalation vulnerability in NVIDIA DGX Spark GB10 due to SROOT vulnerability, potentially leading to code execution, information disclosure, data tampering, denial of service, or escalation of privileges.

Basic Information

ID CVE-2025-33187

Source nvidia

Published Nov 25, 2025 at 17:57

Modified Nov 25, 2025 at 20:23

Affected Product

Vendor NVIDIA

Product DGX Spark

Version All versions prior to OTA0

Affected Versions NVIDIA DGX Spark All versions prior to OTA0

CWE Classification

CWE-269

AI Assessment

AI Score 9.3 / 10

AI Severity Critical

Vendor NVIDIA

Product DGX Spark

Version All versions prior to OTA0

References

{
    "lastseen": "",
    "description": "NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of privileges.",
    "published": "2025-11-25T17:57:26.070Z",
    "modified": "2025-11-25T20:23:14.700Z",
    "type": "cve",
    "title": "CVE-2025-33187",
    "source": "nvidia",
    "references": "https://nvd.nist.gov/vuln/detail/CVE-2025-33187\nhttps://www.cve.org/CVERecord?id=CVE-2025-33187\nhttps://nvidia.custhelp.com/app/answers/detail/a_id/5720",
    "id": "CVE-2025-33187",
    "bulletinFamily": "",
    "cwe": [
        "CWE-269"
    ],
    "cvelist": null,
    "sourceData": "NVIDIA DGX Spark All versions prior to OTA0",
    "sourceHref": "",
    "cvss": {
        "score": 9.3,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "DGX Spark",
    "version": "All versions prior to OTA0",
    "vendor": "NVIDIA",
    "ai_description": "Privilege escalation vulnerability in NVIDIA DGX Spark GB10 due to SROOT vulnerability, potentially leading to code execution, information disclosure, data tampering, denial of service, or escalation of privileges.",
    "ai_severity": "Critical",
    "ai_vendor": "NVIDIA",
    "ai_product": "DGX Spark",
    "ai_version": "All versions prior to OTA0",
    "ai_score": 9.3
}

💭 Join the Security Discussion ❌ Cancel Reply