NVIDIA DGX Spark Vulnerabilities Let Attackers Execute Malicious Code and DoS Attacks

NVIDIA issued an urgent security update for DGX Spark AI workstations after its Offensive Security Research team found 14 firmware vulnerabilities (notably CVE-2025-33187, CVSS 9.3) affecting SROOT, OSROOT, and hardware resource controls; these flaws can enable code execution, information disclosure, denial-of-service, and privilege escalation, primarily requiring local access, and NVIDIA advises immediate installation of the OTA0 DGX OS update to remediate all issues.