What’s Vulnerable › Products
Linaro/OP-TEE OP-TEE vulnerabilities
29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Linaro/OP-TEE OP-TEE version is affected
Latest Linaro/OP-TEE OP-TEE vulnerabilities
- CVE-2026-53763 — OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee (CVSS 3.8)
- CVE-2026-44362 — OP-TEE's subkey rollback protection can be bypassed with older subkey versions (CVSS 5.5)
- CVE-2026-42546 — OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references (CVSS 3.8)
- CVE-2026-41516 — OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle (CVSS 3.3)
- CVE-2026-41515 — OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery (CVSS 3.3)
- CVE-2026-41514 — OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery (CVSS 3.3)
- CVE-2026-41434 — OP-TEE has unbounded recursion in sanitize_client_object() (CVSS 3.3)
- CVE-2026-40257 — OP-TEE has SHA-3 accelerated finalize heap overflow (CVSS 5.5)
- CVE-2026-45702 — OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic (CVSS 5.5)
- CVE-2026-45614 — OP-TEE vulnerable to ECDH private key recovery (CVSS 4.7)
- CVE-2026-40290 — OP-TEE has a Use-After-Free race in FF-A shared-memory teardown (CVSS 7.8)
- CVE-2026-33662 — OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode() (CVSS 7.5)
- CVE-2026-33317 — OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure (CVSS 8.7)
- CVE-2023-41325 — OP-TEE double free in shdr_verify_signature (CVSS 6.7)
- CVE-2022-47549 — (CVSS 6.4)
- CVE-2022-46152 — OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function (CVSS 8.8)
- CVE-2021-44149 — (CVSS 7.8)
- CVE-2021-36133 — (CVSS 7.1)
- CVE-2019-25052 — (CVSS 9.1)
- CVE-2020-13799 — (CVSS 6.8)
- CVE-2019-1010292 — (CVSS 9.8)
- CVE-2019-1010298 — (CVSS 9.8)
- CVE-2019-1010297 — (CVSS 9.8)
- CVE-2019-1010296 — (CVSS 9.8)
- CVE-2019-1010295 — (CVSS 9.8)