Skip to contentOp-tee Optee Os vulnerabilities
- op-tee optee osOP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt OperationsCVE-2026-719698.4 High
- op-tee optee osOP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENTCVE-2026-719688.4 High
- op-tee optee osOP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_sessionCVE-2026-719675.7 Medium
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guaranteeCVE-2026-537633.8 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE's subkey rollback protection can be bypassed with older subkey versionsCVE-2026-443625.5 Medium
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj referencesCVE-2026-425463.8 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding OracleCVE-2026-415162.5 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recoveryCVE-2026-415152.5 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recoveryCVE-2026-415142.5 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has unbounded recursion in sanitize_client_object()CVE-2026-414343.3 Low
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has SHA-3 accelerated finalize heap overflowCVE-2026-402575.5 Medium
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panicCVE-2026-457024.4 Medium
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE vulnerable to ECDH private key recoveryCVE-2026-456144.7 Medium
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE has a Use-After-Free race in FF-A shared-memory teardownCVE-2026-402907.8 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()CVE-2026-336627.5 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE: PKCS#11 TA out-of-bounds read and memory disclosureCVE-2026-33317Public exploit8.7 High
- op-tee optee osREE userspace code can panic TAs, leading to fTPM PCR reset and data disclosureCVE-2025-46733Fix available7.9 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE double free in shdr_verify_signatureCVE-2023-413257.4 High
- trustedfirmware op-tee, op-tee optee os +1 moreOP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs functionCVE-2022-46152Public exploit8.2 High