NVIDIA Dgx Spark Uefi vulnerabilities

CVE-2026-47626 High · 8.2 CWE-787 Aug 25, 2026

Out-of-bounds Write in NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-47624 Medium · 6.0 CWE-693 Aug 25, 2026

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an…

NVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by privileged local user. A successful exploit of this vulnerability may allow an attacker to bypass administrator password protection in UEFi.

CVE-2026-24263 High · 8.2 CWE-476 Aug 25, 2026

NULL Pointer Dereference in NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-24262 High · 8.2 CWE-787 Aug 25, 2026

Out-of-bounds Write in NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.

CVE-2026-24225 Medium · 6.0 CWE-125 Aug 25, 2026

Out-of-bounds Read in NVIDIA Dgx Spark Uefi

NVIDIA DGX Spark contains a vulnerability in the standalone MM firmware where an attacker could be able to cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure.