NVIDIA DGX Spark SROOT Firmware Input Validation Vulnerability Leading to Information Disclosure or Denial-of-Service

A vulnerability exists in the SROOT firmware of NVIDIA DGX Spark GB10, where improper processing of input data could be exploited by an attacker. This vulnerability may result in information disclosure or a denial-of-service condition.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure or cause a denial-of-service condition, disrupting normal system operations.

Remediation

Users are advised to download and install the latest version of NVIDIA DGX OS from the NVIDIA DGX site. The OTA0 version includes this security update.