<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dgx os</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-33200: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to </title><link>https://patchthecve.com/cve/CVE-2025-33200.html</link><guid>https://patchthecve.com/cve/CVE-2025-33200.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>LOW 2.3: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.</description></item><item><title>CVE-2025-33199: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect cont</title><link>https://patchthecve.com/cve/CVE-2025-33199.html</link><guid>https://patchthecve.com/cve/CVE-2025-33199.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>LOW 3.2: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering.</description></item><item><title>CVE-2025-33198: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to </title><link>https://patchthecve.com/cve/CVE-2025-33198.html</link><guid>https://patchthecve.com/cve/CVE-2025-33198.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>LOW 3.3: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.</description></item><item><title>CVE-2025-33197: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer</title><link>https://patchthecve.com/cve/CVE-2025-33197.html</link><guid>https://patchthecve.com/cve/CVE-2025-33197.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>MEDIUM 4.3: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.</description></item><item><title>CVE-2025-33196: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to </title><link>https://patchthecve.com/cve/CVE-2025-33196.html</link><guid>https://patchthecve.com/cve/CVE-2025-33196.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>MEDIUM 4.4: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.</description></item><item><title>CVE-2025-33195: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected mem</title><link>https://patchthecve.com/cve/CVE-2025-33195.html</link><guid>https://patchthecve.com/cve/CVE-2025-33195.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>MEDIUM 4.4: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exploit of this vulnerability might lead to data tampering, denial of service, or escalation of privileges.</description></item><item><title>CVE-2025-33194: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper proce</title><link>https://patchthecve.com/cve/CVE-2025-33194.html</link><guid>https://patchthecve.com/cve/CVE-2025-33194.html</guid><pubDate>Wed, 17 Jun 2026 09:13:13 +0000</pubDate><description>MEDIUM 5.7: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service.</description></item><item><title>CVE-2025-33193: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper valid</title><link>https://patchthecve.com/cve/CVE-2025-33193.html</link><guid>https://patchthecve.com/cve/CVE-2025-33193.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>MEDIUM 5.7: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity. A successful exploit of this vulnerability might lead to information disclosure.</description></item><item><title>CVE-2025-33192: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary m</title><link>https://patchthecve.com/cve/CVE-2025-33192.html</link><guid>https://patchthecve.com/cve/CVE-2025-33192.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>MEDIUM 5.7: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service.</description></item><item><title>CVE-2025-33191: NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid me</title><link>https://patchthecve.com/cve/CVE-2025-33191.html</link><guid>https://patchthecve.com/cve/CVE-2025-33191.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>MEDIUM 5.7: NVIDIA DGX Spark GB10 contains a vulnerability in OSROOT firmware, where an attacker could cause an invalid memory read. A successful exploit of this vulnerability might lead to denial of service.</description></item><item><title>CVE-2025-33190: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound</title><link>https://patchthecve.com/cve/CVE-2025-33190.html</link><guid>https://patchthecve.com/cve/CVE-2025-33190.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>MEDIUM 6.7: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, or escalation of privileges.</description></item><item><title>CVE-2025-33189: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-boun</title><link>https://patchthecve.com/cve/CVE-2025-33189.html</link><guid>https://patchthecve.com/cve/CVE-2025-33189.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>HIGH 7.8: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an out-of-bound write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclosure, or escalation of privileges.</description></item><item><title>CVE-2025-33188: NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardw</title><link>https://patchthecve.com/cve/CVE-2025-33188.html</link><guid>https://patchthecve.com/cve/CVE-2025-33188.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>HIGH 8.0: NVIDIA DGX Spark GB10 contains a vulnerability in hardware resources where an attacker could tamper with hardware controls. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service.</description></item><item><title>CVE-2025-33187: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain</title><link>https://patchthecve.com/cve/CVE-2025-33187.html</link><guid>https://patchthecve.com/cve/CVE-2025-33187.html</guid><pubDate>Wed, 17 Jun 2026 09:13:12 +0000</pubDate><description>CRITICAL 9.3: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT, where an attacker could use privileged access to gain access to SoC protected areas. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, denial of service, or escalation of privilege</description></item></channel></rss>