Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak…

OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment

OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure

OP-TEE has a Use-After-Free race in FF-A shared-memory teardown

An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0

OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error

The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data…

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform…

Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces,…

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to…

OP-TEE's subkey rollback protection can be bypassed with older subkey versions

OP-TEE has SHA-3 accelerated finalize heap overflow

OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP

OP-TEE vulnerable to ECDH private key recovery

OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee

OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references

OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle

OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery

OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery

OP-TEE has unbounded recursion in sanitize_client_object()