TR
Vendor
trustedfirmware
89
CVEs
1
On KEV
0
New 30D
Products
TF7.8
Trusted Firmware-M
TrustedFirmware
7 CVEs1 on KEV0 new
MT9.8
Mbed TLS
trustedfirmware
43 CVEs0 on KEV0 new
OP9.8
Op-tee
Trustedfirmware
29 CVEs0 on KEV0 new
TF8.1
Trusted Firmware-a
Trustedfirmware
7 CVEs0 on KEV0 new
TF9.8
Tf-psa-crypto
Trustedfirmware
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-73064 | MT Mbed TLS trustedfirmware | 2.9 | Sep 24 | In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream |
| CVE-2026-25832 | MT Mbed TLS TrustedFirmware | 3.7 | Sep 14 | In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group |
| CVE-2026-54467 | TF Trusted Firmware-M TrustedFirmware | 7.0 | Aug 26 | On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer |
| CVE-2026-53763 | OP Op-tee Trustedfirmware | 3.8 | Jul 6 | OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee |
| CVE-2026-44362 | OP Op-tee Trustedfirmware | 5.5 | Jul 6 | OP-TEE's subkey rollback protection can be bypassed with older subkey versions |
| CVE-2026-42546 | OP Op-tee Trustedfirmware | 3.8 | Jul 6 | OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references |
| CVE-2026-41516 | OP Op-tee Trustedfirmware | 3.3 | Jul 6 | OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle |
| CVE-2026-41515 | OP Op-tee Trustedfirmware | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery |
| CVE-2026-41514 | OP Op-tee Trustedfirmware | 3.3 | Jul 6 | OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery |
| CVE-2026-41434 | OP Op-tee Trustedfirmware | 3.3 | Jul 6 | OP-TEE has unbounded recursion in sanitize_client_object() |
| CVE-2026-40257 | OP Op-tee Trustedfirmware | 5.5 | Jul 6 | OP-TEE has SHA-3 accelerated finalize heap overflow |
| CVE-2026-45702 | OP Op-tee Trustedfirmware | 5.5 | Jun 3 | OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic |
| CVE-2026-45614 | OP Op-tee Trustedfirmware | 4.7 | Jun 3 | OP-TEE vulnerable to ECDH private key recovery |
| CVE-2026-40290 | OP Op-tee Trustedfirmware | 7.8 | Jun 3 | OP-TEE has a Use-After-Free race in FF-A shared-memory teardown |
| CVE-2026-33662 | OP Op-tee Trustedfirmware | 7.5 | Apr 24 | OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() |
| CVE-2026-33317 | OP Op-tee Trustedfirmware | 8.7 | Apr 24 | OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure |
| CVE-2026-34877 | MT Mbed Tls Trustedfirmware | 9.8 | Apr 2 | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0 |
| CVE-2026-34876 | MT Mbed Tls Trustedfirmware | 7.5 | Apr 2 | An issue was discovered in Mbed TLS 3.x before 3.6.6 |
| CVE-2026-34871 | TF Tf-psa-crypto Trustedfirmware | 6.7 | Apr 1 | An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0 |
| CVE-2026-34873 | MT Mbed Tls Trustedfirmware | 9.1 | Apr 1 | An issue was discovered in Mbed TLS 3.5.0 through 4.0.0 |
| CVE-2026-34874 | MT Mbed Tls Trustedfirmware | 7.5 | Apr 1 | An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0 |
| CVE-2026-25835 | MT Mbed Tls Trustedfirmware | 7.7 | Apr 1 | Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG) |
| CVE-2026-25833 | MT Mbed Tls Trustedfirmware | 7.5 | Apr 1 | Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function |
| CVE-2026-34875 | MT Mbed Tls Trustedfirmware | 9.8 | Apr 1 | An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0 |
| CVE-2026-25834 | MT Mbed Tls Trustedfirmware | 6.5 | Apr 1 | Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade |
| CVE-2025-49087 | MT Mbed Tls Trustedfirmware | 3.7 | Jul 20 | In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used |
| CVE-2025-49601 | MT Mbed Tls Trustedfirmware | 6.5 | Jul 4 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before reading a 32-bit field, allowing a possible… |
| CVE-2025-49600 | MT Mbed Tls Trustedfirmware | 4.9 | Jul 4 | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS (Leighton-Micali… |
| CVE-2025-27810 | MT Mbed Tls Trustedfirmware | 4.8 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message,… |
| CVE-2025-27809 | MT Mbed Tls Trustedfirmware | 5.4 | Mar 25 | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls… |
| CVE-2024-49195 | MT Mbed Tls Trustedfirmware | 9.8 | Oct 15 | Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair |
| CVE-2023-51712 | TF Trusted Firmware-m Trustedfirmware | 4.7 | Sep 5 | An issue was discovered in Trusted Firmware-M through 2.0.0 |
| CVE-2024-45159 | MT Mbed Tls Trustedfirmware | 9.8 | Sep 5 | An issue was discovered in Mbed TLS 3.x before 3.6.1 |
| CVE-2024-45158 | MT Mbed Tls Trustedfirmware | 9.8 | Sep 5 | An issue was discovered in Mbed TLS 3.6 before 3.6.1 |
| CVE-2024-45157 | MT Mbed Tls Trustedfirmware | 5.1 | Sep 5 | An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used |
| CVE-2023-31339 | TF Trusted Firmware-a Trustedfirmware | 5.8 | Aug 13 | Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially… |
| CVE-2024-30166 | MT Mbed Tls Trustedfirmware | 9.1 | Apr 3 | In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256… |
| CVE-2024-28836 | MT Mbed Tls Trustedfirmware | 5.4 | Apr 3 | An issue was discovered in Mbed TLS 3.5.x before 3.6.0 |
| CVE-2024-28755 | MT Mbed Tls Trustedfirmware | 6.5 | Apr 3 | An issue was discovered in Mbed TLS 3.5.x before 3.6.0 |
| CVE-2024-28960 | MT Mbed Tls Trustedfirmware | 8.2 | Mar 29 | An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto |
| CVE-2024-23775 | MT Mbed Tls Trustedfirmware | 7.5 | Jan 31 | Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension() |
| CVE-2024-23170 | MT Mbed Tls Trustedfirmware | 5.5 | Jan 31 | An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2 |
| CVE-2024-23744 | MT Mbed Tls Trustedfirmware | 7.5 | Jan 21 | An issue was discovered in Mbed TLS 3.5.1 |
| CVE-2023-45199 | MT Mbed Tls Trustedfirmware | 9.8 | Oct 7 | Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution |
| CVE-2023-43615 | MT Mbed Tls Trustedfirmware | 7.5 | Oct 7 | Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow |
| CVE-2023-41325 | OP Op-tee Trustedfirmware | 6.7 | Sep 15 | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology |
| CVE-2023-40271 | TF Trusted Firmware-m Trustedfirmware | 7.5 | Sep 8 | In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selected, and the… |
| CVE-2021-36647 | MT Mbed Tls Trustedfirmware | 4.7 | Jan 17 | Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows… |
| CVE-2022-47630 | TF Trusted Firmware-a Trustedfirmware | 7.4 | Jan 16 | Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates |
| CVE-2022-47549 | OP Op-tee Trustedfirmware | 6.4 | Dec 19 | An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to… |
| CVE-2022-46393 | MT Mbed Tls Trustedfirmware | 9.8 | Dec 15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 |
| CVE-2022-46392 | MT Mbed Tls Trustedfirmware | 5.3 | Dec 15 | An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0 |
| CVE-2022-46152 | OP Op-tee Trustedfirmware | 8.8 | Nov 29 | OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment |
| CVE-2022-35409 | MT Mbed Tls Trustedfirmware | 9.1 | Jul 15 | An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0 |
| CVE-2021-43619 | TF Trusted Firmware-m Trustedfirmware | 7.8 | Mar 1 | Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition |
| CVE-2021-40327 | TF Trusted Firmware-m Trustedfirmware | 5.9 | Jan 13 | Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control |
| CVE-2021-45450 | MT Mbed Tls Trustedfirmware | 7.5 | Dec 21 | In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory… |
| CVE-2021-44732 | MT Mbed Tls Trustedfirmware | 9.8 | Dec 20 | Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure |
| CVE-2021-44149 | OP Op-tee Trustedfirmware | 7.8 | Dec 7 | An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0 |
| CVE-2021-36133 | OP Op-tee Trustedfirmware | 7.1 | Dec 7 | The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform… |