OP
Product
Op-tee
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 8Medium 8Low 6
Watch
Add Op-tee to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53763 | 3.8 | Jul 6 | OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee Affected: 3.0.0 through 4.10.0 |
| CVE-2026-42546 | 3.8 | Jul 6 | OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references Affected: 3.3.0 through 4.10.0 |
| CVE-2026-41516 | 3.3 | Jul 6 | OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle Affected: 4.5.0 through 4.10.0 |
| CVE-2026-41515 | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery Affected: 3.9.0 through 4.10.0 |
| CVE-2026-41514 | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery Affected: 4.5.0 through 4.10.0 |
| CVE-2026-41434 | 3.3 | Jul 6 | OP-TEE has unbounded recursion in sanitize_client_object() Affected: 3.10.0 through 4.10.0 |
Showing 6
