NVIDIA DGX Spark Out-of-Bounds Write Vulnerability in SROOT Firmware Allowing Code Execution and Privilege Escalation

A vulnerability has been identified in the SROOT firmware of NVIDIA DGX Spark GB10, where an out-of-bounds write could be exploited by an attacker. This vulnerability could lead to unauthorized code execution, data tampering, denial of service, or escalation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized code execution, modification of data, disruption of service, or unauthorized elevation of privileges.

Remediation

Users are advised to download and install the latest version of NVIDIA DGX OS from the NVIDIA DGX site.