optee-os vulnerabilities (Ubuntu)
17 vulnerabilities.
-
optee-osUbuntu OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations 8.4 High -
optee-osUbuntu OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT 8.4 High -
optee-osUbuntu OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session 5.7 Medium -
optee-osUbuntu OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee 3.8 Low -
optee-osUbuntu OP-TEE's subkey rollback protection can be bypassed with older subkey versions 5.5 Medium -
optee-osUbuntu OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references 3.8 Low -
optee-osUbuntu OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle 2.5 Low -
optee-osUbuntu OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery 2.5 Low -
optee-osUbuntu OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery 2.5 Low -
optee-osUbuntu OP-TEE has unbounded recursion in sanitize_client_object() 3.3 Low -
optee-osUbuntu OP-TEE has SHA-3 accelerated finalize heap overflow 5.5 Medium -
optee-osUbuntu OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic 4.4 Medium -
optee-osUbuntu OP-TEE vulnerable to ECDH private key recovery 4.7 Medium -
optee-osUbuntu OP-TEE has a Use-After-Free race in FF-A shared-memory teardown 7.8 High -
optee-osUbuntu OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() 7.5 High -
optee-osUbuntu OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure 8.7 High -
optee-osUbuntu The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/wri… 7.1 High