Trustedfirmware Op-tee vulnerabilities

• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee CVE-2026-53763 3.8 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE's subkey rollback protection can be bypassed with older subkey versions CVE-2026-44362 5.5 MediumJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references CVE-2026-42546 3.8 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle CVE-2026-41516 2.5 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery CVE-2026-41515 2.5 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery CVE-2026-41514 2.5 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has unbounded recursion in sanitize_client_object() CVE-2026-41434 3.3 LowJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has SHA-3 accelerated finalize heap overflow CVE-2026-40257 5.5 MediumJuly 6, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic CVE-2026-45702 4.4 MediumJune 3, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE vulnerable to ECDH private key recovery CVE-2026-45614 4.7 MediumJune 3, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE has a Use-After-Free race in FF-A shared-memory teardown CVE-2026-40290 7.8 HighJune 3, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() CVE-2026-33662 7.5 HighApril 24, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure CVE-2026-33317 Public exploit 8.7 HighApril 24, 2026
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE double free in shdr_verify_signature CVE-2023-41325 7.4 HighSeptember 15, 2023
• trustedfirmware op-tee An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted... CVE-2022-47549 6.4 MediumDecember 19, 2022
• trustedfirmware op-tee, op-tee optee os +1 more OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function CVE-2022-46152 Public exploit 8.2 HighNovember 29, 2022
• trustedfirmware op-tee An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resu… CVE-2021-44149 7.8 HighDecember 7, 2021
• trustedfirmware op-tee The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/wri… CVE-2021-36133 7.1 HighDecember 7, 2021
• trustedfirmware op-tee In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call... CVE-2019-25052 9.1 CriticalAugust 11, 2021
• trustedfirmware op-tee, westerndigital inand cl em132 firmware, inand ix em132 firmware +1 more +3 more Western Digital iNAND devices through 2020-06-03 allow Authentication Bypass via a capture-replay... CVE-2020-13799 6.8 MediumNovember 18, 2020
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This... CVE-2019-1010292 9.8 CriticalJuly 16, 2019
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory... CVE-2019-1010293 9.8 CriticalJuly 15, 2019
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially... CVE-2019-1010294 7.5 HighJuly 15, 2019
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory... CVE-2019-1010295 9.8 CriticalJuly 15, 2019
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code... CVE-2019-1010296 9.8 CriticalJuly 15, 2019
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution... CVE-2019-1010297 9.8 CriticalJuly 15, 2019
• linaro/op-tee op-tee Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code... CVE-2019-1010298 Public exploit 9.8 CriticalJuly 15, 2019
• libtom libtomcrypt, trustedfirmware op-tee +1 more Updated libtomcrypt packages fix security vulnerability CVE-2018-12437 Fix available 4.9 MediumJune 15, 2018
• libtom libtomcrypt, trustedfirmware op-tee +1 more libtomcrypt - security update CVE-2016-6129 Fix available 7.5 HighSeptember 6, 2016