Lucene search
+L

4450 matches found

EUVD
EUVD
•added 2025/11/25 5:57 p.m.•22 views

EUVD-2025-199626

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service...

8CVSS6AI score0.00156EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/25 5:57 p.m.•18 views

EUVD-2025-199628

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...

9.3CVSS6.9AI score0.00175EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/25 5:57 p.m.•40 views

CVE-2025-33187

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...

9.3CVSS0.00175EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/25 5:57 p.m.•52 views

CVE-2025-33187

CVE-2025-33187 affects NVIDIA DGX Spark GB10, with a vulnerability in the SROOT component that could allow an attacker with local, low-privilege access to reach SoC protected areas. Exploitation could lead to code execution, information disclosure, data tampering, denial of service, or privilege ...

9.3CVSS8.1AI score0.00175EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•6 views

CVE-2025-33189: Out-of-bounds Write

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure, or escalation of privileges...

7.8CVSS7.2AI score0.00179EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•7 views

CVE-2025-33188: Improper Privilege Management

NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service...

8CVSS7.3AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•27 views

PT-2025-48060

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering...

3.2CVSS6.7AI score0.00139EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•12 views

CVE-2025-33199: Always-Incorrect Control Flow Implementation

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering...

3.8CVSS5.6AI score0.00139EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•22 views

PT-2025-48056

Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark GB10 Description The NVIDIA DGX Spark GB10 contains a flaw in the SROOT firmware that could allow an attacker to trigger unexpected memory buffer operations. Exploitation of this issue may result in data tampering, denial of...

7.8CVSS5.8AI score0.00147EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•38 views

NVIDIA DGX Spark security vulnerabilities

The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from a control pop behavior error in the SROOT firmware that could lead to data tampering...

3.8CVSS5.3AI score0.00139EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•15 views

NVIDIA DGX Spark buffer error vulnerability

The NVIDIA DGX Spark is a personal AI computer from NVIDIA. A buffer error vulnerability exists in NVIDIA DGX Spark GB10, which stems from an out-of-bounds write in the SROOT firmware that could lead to code execution, data tampering, denial of service, information disclosure, or elevation of...

7.8CVSS7.4AI score0.00179EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•7 views

CVE-2025-33195: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exploit of this vulnerability might lead to data tampering, denial of service, or escalation of privileges...

7.8CVSS5.8AI score0.00147EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•6 views

CVE-2025-33190: Out-of-bounds Write

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or escalation of privileges...

7.8CVSS6.7AI score0.00157EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•20 views

NVIDIA DGX Spark buffer error vulnerability

The NVIDIA DGX Spark is a personal AI computer from NVIDIA. A buffer error vulnerability exists in NVIDIA DGX Spark GB10, which stems from an unexpected memory buffer operation in the SROOT firmware that could result in data tampering, denial of service, or elevation of privilege...

7.8CVSS5.6AI score0.00147EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•34 views

PT-2025-48051

Name of the Vulnerable Software and Affected Versions NVIDIA DGX Spark GB10 Description The NVIDIA DGX Spark GB10 contains a flaw in the SROOT firmware that could allow an attacker to cause an out-of-bound write. Exploitation of this issue may lead to code execution, data tampering, denial of...

7.8CVSS6.7AI score0.00157EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/11/25 12:00 a.m.•21 views

PT-2025-48063

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7.3AI score0.00203EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/25 12:00 a.m.•10 views

CVE-2025-33187: Improper Privilege Management

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of...

9.3CVSS8.1AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/19 5:20 p.m.•15 views

CVE-2025-33184

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS7.4AI score0.0049EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/19 5:20 p.m.•19 views

CVE-2025-33183

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS7.6AI score0.0049EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/18 5:16 p.m.•18 views

CVE-2025-33183

NVIDIA Isaac-GR00T for all platforms contains a vulnerability in a Python component, where an attacker could cause a code injection issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

7.8CVSS0.0049EPSS
SaveExploits0References3
Rows per page
Query Builder