Op-tee vulnerabilities

Products

• Optee Os 19

Newest

• op-tee optee os OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations CVE-2026-71969 8.4 HighAugust 10, 2026
• op-tee optee os OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT CVE-2026-71968 8.4 HighAugust 10, 2026
• op-tee optee os OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session CVE-2026-71967 5.7 MediumAugust 10, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee CVE-2026-53763 3.8 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE's subkey rollback protection can be bypassed with older subkey versions CVE-2026-44362 5.5 MediumJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references CVE-2026-42546 3.8 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle CVE-2026-41516 2.5 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery CVE-2026-41515 2.5 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery CVE-2026-41514 2.5 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has unbounded recursion in sanitize_client_object() CVE-2026-41434 3.3 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has SHA-3 accelerated finalize heap overflow CVE-2026-40257 5.5 MediumJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic CVE-2026-45702 4.4 MediumJune 3, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE vulnerable to ECDH private key recovery CVE-2026-45614 4.7 MediumJune 3, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has a Use-After-Free race in FF-A shared-memory teardown CVE-2026-40290 7.8 HighJune 3, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() CVE-2026-33662 7.5 HighApril 24, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure CVE-2026-33317 Public exploit 8.7 HighApril 24, 2026
• op-tee optee os REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure CVE-2025-46733 Fix available 7.9 HighJuly 4, 2025
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE double free in shdr_verify_signature CVE-2023-41325 7.4 HighSeptember 15, 2023
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function CVE-2022-46152 Public exploit 8.2 HighNovember 29, 2022