Skip to content
Trustedfirmware vulnerabilities
Newest
-
arm mbed tls
In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy...
CVE-2026-73064
Fix available
2.9 Low
-
trustedfirmware trusted firmware-m
On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization...
CVE-2026-54467
7.0 High
-
arm mbed tls
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts...
CVE-2026-25832
Fix available
3.7 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee
CVE-2026-53763
3.8 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE's subkey rollback protection can be bypassed with older subkey versions
CVE-2026-44362
5.5 Medium
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references
CVE-2026-42546
3.8 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle
CVE-2026-41516
2.5 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery
CVE-2026-41515
2.5 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery
CVE-2026-41514
2.5 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE has unbounded recursion in sanitize_client_object()
CVE-2026-41434
3.3 Low
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE has SHA-3 accelerated finalize heap overflow
CVE-2026-40257
5.5 Medium
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic
CVE-2026-45702
4.4 Medium
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE vulnerable to ECDH private key recovery
CVE-2026-45614
4.7 Medium
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE has a Use-After-Free race in FF-A shared-memory teardown
CVE-2026-40290
7.8 High
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()
CVE-2026-33662
7.5 High
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure
CVE-2026-33317
Public exploit
8.7 High
-
arm mbed tls
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0....
CVE-2026-34877
Fix available
9.8 Critical
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in...
CVE-2026-34876
Fix available
7.5 High
-
trustedfirmware mbed tls, tf-psa-crypto +1 more
An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can...
CVE-2026-34875
Fix available
9.8 Critical
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer...
CVE-2026-34874
Fix available
7.5 High
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while...
CVE-2026-34873
Fix available
9.1 Critical
-
arm mbed tls, trustedfirmware tf-psa-crypto +1 more
An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1...
CVE-2026-34871
Fix available
6.7 Medium
-
arm mbed tls, trustedfirmware tf-psa-crypto +1 more
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number...
CVE-2026-25835
Fix available
7.7 High
-
trustedfirmware mbed tls
Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.
CVE-2026-25834
Fix available
6.5 Medium
-
trustedfirmware mbed tls
Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6...
CVE-2026-25833
Fix available
7.5 High
-
trustedfirmware mbed tls, mbed mbedtls +1 more
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding...
CVE-2025-49087
Fix available
4.0 Medium
-
mbed mbedtls, trustedfirmware mbed tls +1 more
In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer...
CVE-2025-49601
Fix available
4.8 Medium
-
mbed mbedtls, trustedfirmware mbed tls +1 more
In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash...
CVE-2025-49600
Fix available
4.9 Medium
-
arm mbed tls, mbed mbedtls +1 more
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or...
CVE-2025-27810
Fix available
5.4 Medium
-
arm mbed tls, mbed mbedtls +1 more
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have...
CVE-2025-27809
Fix available
5.4 Medium
-
trustedfirmware mbed tls, mbed mbedtls +1 more
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque...
CVE-2024-49195
Fix available
9.8 Critical
-
trustedfirmware trusted firmware-m
An issue was discovered in Trusted Firmware-M through 2.1.0. User provided (and controlled)...
CVE-2024-45746
9.8 Critical
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables...
CVE-2024-45159
Fix available
9.8 Critical
-
mbed mbedtls, trustedfirmware mbed tls +1 more
An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in...
CVE-2024-45158
Fix available
9.8 Critical
-
trustedfirmware trusted firmware-m
An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in...
CVE-2023-51712
4.7 Medium
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user...
CVE-2024-45157
Fix available
5.1 Medium
-
amd trusted firmware-a, zynq™ ultrascale+™ mpsoc/rfsoc +1 more
Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC...
CVE-2023-31339
4.8 Medium
-
arm mbed tls
In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure...
CVE-2024-30166
9.1 Critical
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the...
CVE-2024-28836
5.4 Medium
-
mbed mbedtls, trustedfirmware mbed tls +1 more
An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the...
CVE-2024-28755
Fix available
6.5 Medium
-
arm mbed crypto, mbed tls, fedoraproject fedora +2 more +4 more
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and...
CVE-2024-28960
Fix available
8.2 High
-
arm mbed tls
Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows...
CVE-2024-23775
Fix available
7.5 High
-
arm mbed tls
An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing...
CVE-2024-23170
Fix available
5.5 Medium
-
trustedfirmware mbed tls
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends...
CVE-2024-23744
7.5 High
-
trustedfirmware mbed tls, mbed mbedtls +1 more
Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code...
CVE-2023-45199
Fix available
9.8 Critical
-
arm mbed tls, fedoraproject fedora, mbed mbedtls +2 more
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.
CVE-2023-43615
Fix available
7.5 High
-
trustedfirmware op-tee, op-tee optee os +1 more
OP-TEE double free in shdr_verify_signature
CVE-2023-41325
7.4 High
-
trustedfirmware trusted firmware-m
In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator...
CVE-2023-40271
7.5 High
-
arm mbed tls
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum...
CVE-2021-36647
Fix available
4.7 Medium
-
trustedfirmware trusted firmware-a
Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot...
CVE-2022-47630
Fix available
7.4 High
- Show olderLoading…