Login Request a demo
OP
Product
optee_os
by OP-TEE · last CVE Aug 10, 2026
16
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 0High 3Medium 7Low 6
Severity
All severities16Critical0High3Medium7Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add optee_os to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71969
6.7
0%
Aug 10
OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
Affected: through 4.10.0
CVE-2026-71968
6.7
0%
Aug 10
OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT
Affected: through 4.10.0
CVE-2026-71967
5.5
0%
Aug 10
OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session
Affected: through 4.10.0
CVE-2026-44362
5.5
0%
Jul 6
OP-TEE's subkey rollback protection can be bypassed with older subkey versions
Affected: >= 3.20.0, < 4.11.0
CVE-2026-40257
5.5
0%
Jul 6
OP-TEE has SHA-3 accelerated finalize heap overflow
Affected: >= 3.21.0, < 4.11.0
CVE-2026-45702
5.5
0%
Jun 3
OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic
Affected: >= 4.3.0, < 4.11.0
CVE-2026-45614
4.7
0%
Jun 3
OP-TEE vulnerable to ECDH private key recovery
Affected: < 4.11.0
Showing 7