OP
Product
Op-tee
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 8Medium 8Low 6
Watch
Add Op-tee to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-13799 | 6.8 | Nov 18 | Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces,… Affected: through 3.11.0 |
| CVE-2023-41325 | 6.7 | Sep 15 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology Affected: 3.20.0 before 3.22.0; 3.22.0 |
| CVE-2022-47549 | 6.4 | Dec 19 | An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to… Affected: before 3.20 |
| CVE-2026-44362 | 5.5 | Jul 6 | OP-TEE's subkey rollback protection can be bypassed with older subkey versions Affected: 3.20.0 through 4.10.0 |
| CVE-2026-40257 | 5.5 | Jul 6 | OP-TEE has SHA-3 accelerated finalize heap overflow Affected: 3.21.0 through 4.10.0 |
| CVE-2026-45702 | 5.5 | Jun 3 | OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic Affected: 4.3.0 through 4.10.0 |
| CVE-2018-12437 | 4.9 | Jun 15 | LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP Affected: through 3.5.0 |
| CVE-2026-45614 | 4.7 | Jun 3 | OP-TEE vulnerable to ECDH private key recovery Affected: through 4.10.0 |
Showing 8
