CNNVD-202511-2744 Information

CNNVD ID

CNNVD-202511-2744

CVE-2025-33187

  • CNNVD Published: 2025-11-25

Description (Chinese)

NVIDIA DGX Spark是美国英伟达(NVIDIA)公司的一款个人AI计算机。 NVIDIA DGX Spark GB10存在安全漏洞,该漏洞源于SROOT中特权访问可访问SoC保护区,可能导致代码执行、信息泄露、数据篡改、拒绝服务或权限提升。

Description (English)

NVIDIA DGX Spark is a personal AI computer of NVIDIA. There is a security loophole in NVIDIA DGX Spark GB10, which stems from privileged access to the SoC Protected Area in SROOT, which may lead to code enforcement, information leaks, data manipulation, denial of service or enhanced access.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

英伟达

Published

2025-11-25

Last Modified

2026-02-24

References

https://www.cve.org/CVERecord?id=CVE-2025-33187 https://nvd.nist.gov/vuln/detail/CVE-2025-33187 https://nvidia.custhelp.com/app/answers/detail/a_id/5720 https://access.redhat.com/security/cve/cve-2025-33187

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5720

Share on: