CNNVD-202511-2739 Information

CNNVD ID

CNNVD-202511-2739

CVE-2025-33192

  • CNNVD Published: 2025-11-25

Description (Chinese)

NVIDIA DGX Spark是美国英伟达(NVIDIA)公司的一款个人AI计算机。 NVIDIA DGX Spark GB10存在安全漏洞,该漏洞源于SROOT固件中存在任意内存读取,可能导致拒绝服务。

Description (English)

NVIDIA DGX Spark is a personal AI computer of NVIDIA. NVIDIA DGX Spark GB10 has a security loophole, which stems from the existence of arbitrary memory access in SROOT solids, which may lead to the denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

英伟达

Published

2025-11-25

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-33192 https://nvidia.custhelp.com/app/answers/detail/a_id/5720 https://www.cve.org/CVERecord?id=CVE-2025-33192 https://access.redhat.com/security/cve/cve-2025-33192

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5720

Share on: