OP
Vendor
OP-TEE
16
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-71969 | OP optee_os OP-TEE | 6.7 | Aug 10 | OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations |
| CVE-2026-71968 | OP optee_os OP-TEE | 6.7 | Aug 10 | OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT |
| CVE-2026-71967 | OP optee_os OP-TEE | 5.5 | Aug 10 | OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session |
| CVE-2026-53763 | OP optee_os OP-TEE | 3.8 | Jul 6 | OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee |
| CVE-2026-44362 | OP optee_os OP-TEE | 5.5 | Jul 6 | OP-TEE's subkey rollback protection can be bypassed with older subkey versions |
| CVE-2026-42546 | OP optee_os OP-TEE | 3.8 | Jul 6 | OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references |
| CVE-2026-41516 | OP optee_os OP-TEE | 3.3 | Jul 6 | OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle |
| CVE-2026-41515 | OP optee_os OP-TEE | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery |
| CVE-2026-41514 | OP optee_os OP-TEE | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery |
| CVE-2026-41434 | OP optee_os OP-TEE | 3.3 | Jul 6 | OP-TEE has unbounded recursion in sanitize_client_object() |
| CVE-2026-40257 | OP optee_os OP-TEE | 5.5 | Jul 6 | OP-TEE has SHA-3 accelerated finalize heap overflow |
| CVE-2026-45702 | OP optee_os OP-TEE | 5.5 | Jun 3 | OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic |
| CVE-2026-45614 | OP optee_os OP-TEE | 4.7 | Jun 3 | OP-TEE vulnerable to ECDH private key recovery |
| CVE-2026-40290 | OP optee_os OP-TEE | 7.8 | Jun 3 | OP-TEE has a Use-After-Free race in FF-A shared-memory teardown |
| CVE-2026-33662 | OP optee_os OP-TEE | 7.5 | Apr 24 | OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() |
| CVE-2026-33317 | OP optee_os OP-TEE | 8.7 | Apr 24 | OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure |