OP
Product
Op-tee
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 8Medium 8Low 6
Watch
Add Op-tee to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-46152 | 8.8 | Nov 29 | OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment Affected: before 3.19.0 |
| CVE-2026-33317 | 8.7 | Apr 24 | OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure Affected: 3.13.0 through 4.10.0 |
| CVE-2026-40290 | 7.8 | Jun 3 | OP-TEE has a Use-After-Free race in FF-A shared-memory teardown Affected: 3.16.0 through 4.10.0 |
| CVE-2021-44149 | 7.8 | Dec 7 | An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0 Affected: through 3.15.0 |
| CVE-2026-33662 | 7.5 | Apr 24 | OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() Affected: 3.8.0 through 4.10.0 |
| CVE-2019-1010294 | 7.5 | Jul 15 | Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error Affected: through 3.3.0 |
| CVE-2016-6129 | 7.5 | Feb 13 | The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data… Affected: before 2.2.0 |
| CVE-2021-36133 | 7.1 | Dec 7 | The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform… Affected: All versions, or not specified |
Showing 8