NVIDIA DGX Spark firmware: out-of-bounds write reachable by a privileged local attacker

CVSS 8.2CVE-2026-24262Firmware, BMC & network fabric+1 more CVEscurated

Impact

A privileged local attacker can drive a write outside the intended buffer in DGX Spark system firmware. NVIDIA scores it with changed scope and high confidentiality, integrity and availability impact, so the write reaches components outside the OS's control. Firmware-level code execution survives an OS reinstall - a suspect box is not cleaned by reimaging, only by reflashing. NVIDIA split this across 2 CVE ids (CVE-2026-24262, CVE-2026-47626) in bulletin 5867; both are the same class of flaw with the same fix, so there is one action, not two.

Who can reach it

Local attacker already holding high privileges on the DGX Spark host (CVSS AV:L/PR:H). No network path, no user interaction.

What to do

Take the fixed firmware version from NVIDIA product-security bulletin 5867 - the CVE records do not name one, so do not assume a version. Flash DGX Spark system firmware with the machine out of service through at least one full power cycle; the same image also covers CVE-2026-24263, so schedule a single flash window. There is no in-band mitigation short of restricting who holds administrative access to the host.

Also covers 1 CVE

The vendor assigned a separate id to each affected code path. They share this advisory, this score and this fix, so they are one entry here.

CVE-2026-47626

References

https://nvd.nist.gov/vuln/detail/CVE-2026-24262 https://github.com/NVIDIA/product-security/tree/main/2026/5867 https://www.cve.org/CVERecord?id=CVE-2026-24262

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.