CVE-2025-33190: Nvidia DGX OS RCE Vulnerability

CVE-2025-33190 Overview

CVE-2025-33190 is an out-of-bounds write vulnerability [CWE-787] in the SROOT firmware of NVIDIA DGX Spark GB10. A local attacker with low privileges can trigger the flaw to write outside allocated memory boundaries. Successful exploitation may lead to code execution, data tampering, denial of service, or privilege escalation on affected DGX platforms.

The vulnerability affects NVIDIA DGX OS and DGX Spark hardware running the GB10 SROOT firmware. NVIDIA published a security advisory addressing the issue, tracked as answer ID 5720 in the NVIDIA support portal.

Critical Impact
A local attacker with low privileges can achieve code execution or privilege escalation on NVIDIA DGX Spark GB10 systems by exploiting an out-of-bounds write in SROOT firmware.

Affected Products

NVIDIA DGX OS
NVIDIA DGX Spark (GB10)
SROOT firmware component on affected DGX platforms

Discovery Timeline

2025-11-25 - CVE-2025-33190 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2025-33190

Vulnerability Analysis

The vulnerability resides in the SROOT firmware component of the NVIDIA DGX Spark GB10 platform. SROOT firmware executes in a privileged context during system operation on DGX hardware. An out-of-bounds write occurs when the firmware writes data past the end, or before the beginning, of an intended buffer.

Exploitation requires local access with low-level privileges on the target DGX system. No user interaction is needed to trigger the flaw. Because the affected firmware runs with high trust on the platform, a successful write outside intended memory boundaries can corrupt adjacent structures. This corruption can be leveraged to execute attacker-controlled code, tamper with data, disrupt system availability, or elevate privileges above the attacker's initial context.

Root Cause

The root cause is classified as [CWE-787] Out-of-Bounds Write. The SROOT firmware processes input without adequately validating that resulting write operations remain within allocated buffer boundaries. When an attacker supplies crafted input to the affected firmware code path, the write extends beyond the intended memory region.

Attack Vector

The attack vector is local. An attacker must already have code execution or a foothold on the DGX Spark GB10 system with at least low privileges. From that position, the attacker interacts with the SROOT firmware interface to trigger the vulnerable code path. NVIDIA has not published exploitation details, and no public proof-of-concept exploit is available at this time.

The vulnerability manifests during firmware processing of attacker-influenced data. See the NVIDIA Support Answer for vendor-provided technical context.

Detection Methods for CVE-2025-33190

Indicators of Compromise

Unexpected firmware version mismatches or integrity check failures on NVIDIA DGX Spark GB10 systems.
Unexplained system crashes, kernel panics, or reboots on DGX hosts following local user activity.
Anomalous processes accessing DGX firmware interfaces or /dev nodes associated with the GB10 platform.

Detection Strategies

Monitor for local privilege escalation patterns on DGX OS hosts, including unexpected transitions to root or firmware-privileged contexts.
Baseline SROOT firmware versions across the DGX fleet and alert on deviations from the patched build published by NVIDIA.
Correlate low-privileged user sessions with subsequent firmware or kernel-level events that indicate memory corruption.

Monitoring Recommendations

Enable and forward system audit logs (auditd) from all DGX OS systems to a centralized data lake for correlation.
Track firmware update events and compare installed versions against the fixed release referenced in the NVIDIA advisory.
Alert on unauthorized local logins or privilege changes on DGX hardware, especially in shared research environments.

How to Mitigate CVE-2025-33190

Immediate Actions Required

Apply the SROOT firmware and DGX OS updates published by NVIDIA in security bulletin 5720.
Inventory all NVIDIA DGX Spark GB10 systems and confirm firmware versions before and after patching.
Restrict local access to DGX hardware to trusted administrators only.

Patch Information

NVIDIA has released fixed firmware and DGX OS packages that address CVE-2025-33190. Refer to the NVIDIA Support Answer 5720 for the specific fixed versions and update procedures. Administrators should follow NVIDIA's documented firmware update process for DGX Spark GB10 to ensure the SROOT component is updated correctly.

Workarounds

Limit local login access on DGX Spark GB10 hosts to a minimal set of administrators pending patching.
Enforce strong authentication and session monitoring on all DGX OS accounts to reduce the risk of a local foothold.
Isolate DGX Spark GB10 systems on segmented management networks to reduce lateral movement opportunities.

bash

# Verify current DGX OS and firmware information before applying the NVIDIA update
uname -a
cat /etc/dgx-release
sudo dmidecode -t bios

# Follow NVIDIA's documented DGX OS update procedure to apply the SROOT firmware fix
sudo apt update
sudo apt upgrade
# Reboot after the update completes to activate patched firmware
sudo reboot