What’s Vulnerable › Products

OP-TEE optee_os vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your OP-TEE optee_os version is affected

Latest OP-TEE optee_os vulnerabilities

• CVE-2026-71969 — OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations (CVSS 6.7)
• CVE-2026-71968 — OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT (CVSS 6.7)
• CVE-2026-71967 — OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session (CVSS 5.5)
• CVE-2025-46733 — REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure (CVSS 7.9)