OP
Product
optee_os
16
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 7Low 6
Watch
Add optee_os to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33317 | 8.7 | Apr 24 | OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure Affected: >= 3.13.0, <= 4.10.0 |
| CVE-2026-40290 | 7.8 | Jun 3 | OP-TEE has a Use-After-Free race in FF-A shared-memory teardown Affected: >= 3.16.0, < 4.11.0 |
| CVE-2026-33662 | 7.5 | Apr 24 | OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() Affected: >= 3.8.0, <= 4.10 |
| CVE-2026-71969 | 6.7 | Aug 10 | OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations Affected: through 4.10.0 |
| CVE-2026-71968 | 6.7 | Aug 10 | OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT Affected: through 4.10.0 |
| CVE-2026-71967 | 5.5 | Aug 10 | OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session Affected: through 4.10.0 |
| CVE-2026-44362 | 5.5 | Jul 6 | OP-TEE's subkey rollback protection can be bypassed with older subkey versions Affected: >= 3.20.0, < 4.11.0 |
| CVE-2026-40257 | 5.5 | Jul 6 | OP-TEE has SHA-3 accelerated finalize heap overflow Affected: >= 3.21.0, < 4.11.0 |
| CVE-2026-45702 | 5.5 | Jun 3 | OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic Affected: >= 4.3.0, < 4.11.0 |
| CVE-2026-45614 | 4.7 | Jun 3 | OP-TEE vulnerable to ECDH private key recovery Affected: < 4.11.0 |
| CVE-2026-53763 | 3.8 | Jul 6 | OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee Affected: >= 3.0.0, < 4.11.0 |
| CVE-2026-42546 | 3.8 | Jul 6 | OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references Affected: >= 3.3.0, < 4.11.0 |
| CVE-2026-41516 | 3.3 | Jul 6 | OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle Affected: >= 4.5.0, < 4.11.0 |
| CVE-2026-41515 | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery Affected: >= 3.9.0, < 4.11.0 |
| CVE-2026-41514 | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery Affected: >= 4.5.0, < 4.11.0 |
| CVE-2026-41434 | 3.3 | Jul 6 | OP-TEE has unbounded recursion in sanitize_client_object() Affected: >= 3.10.0, < 4.11.0 |
Showing 16