Op-Tee

9 CVEs across 2 Op-Tee products. Browse Op-Tee vulnerabilities, severities, and proof-of-concept exploits.

Op-Tee products with known CVEs

ProductCVEs
Optee Os19
Op-Tee Os1
Op-Tee CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-71969Medium6.72026-08-10OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTL…
CVE-2026-71968Medium6.72026-08-10OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the abi…
CVE-2026-71967Medium5.52026-08-10OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows…
CVE-2026-53763Low3.82026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-44362Medium5.52026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-42546Low3.82026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-41516Low2.52026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-41515Low2.52026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-41514Low2.52026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-41434Low3.32026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-40257Medium5.52026-07-06OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-45702Medium4.42026-06-03OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-45614Medium4.72026-06-03OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-40290High7.82026-06-03OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-33662High7.52026-04-24OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2026-33317High8.72026-04-24OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2025-46733High7.92025-07-04OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2023-41325High7.42023-09-15OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technolog…
CVE-2022-46152High8.22022-11-29OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validatio…
CVE-2016-6129High7.52017-02-13The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the…