Advisories · Technology
OP-TEE optee_os.
Every CVE that names OP-TEE optee_os among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
- OP-TEE optee_os
- Memory corruption
- CVSS 8.4 High
OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT
- OP-TEE optee_os
- Race condition
- Memory corruption
- CVSS 5.7 Medium
OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session
- OP-TEE optee_os
- Memory corruption
- CVSS 3.8 Low
OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee
- OP-TEE optee_os
- Memory corruption
- CVSS 5.5 Medium
OP-TEE's subkey rollback protection can be bypassed with older subkey versions
- OP-TEE optee_os
- Broken access control
- CVSS 3.8 Low
OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references
- OP-TEE optee_os
- Denial of service
- CVSS 2.5 Low
OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle
- OP-TEE optee_os
- CWE-208
- CVSS 2.5 Low
OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery
- OP-TEE optee_os
- CWE-208
- CVSS 2.5 Low
OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery
- OP-TEE optee_os
- CWE-208
- CVSS 3.3 Low
OP-TEE has unbounded recursion in sanitize_client_object()
- OP-TEE optee_os
- Memory corruption
- CVSS 5.5 Medium
OP-TEE has SHA-3 accelerated finalize heap overflow
- OP-TEE optee_os
- Memory corruption
- CVSS 4.4 Medium
OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic
- OP-TEE optee_os
- Memory corruption
- CVSS 4.7 Medium
OP-TEE vulnerable to ECDH private key recovery
- OP-TEE optee_os
- Weak cryptography or TLS
- CVSS 7.8 High
OP-TEE has a Use-After-Free race in FF-A shared-memory teardown
- OP-TEE optee_os
- Memory corruption
- CVSS 7.5 High
OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()
- OP-TEE optee_os
- Memory corruption
- CVSS 8.7 High
OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure
- OP-TEE optee_os
- Memory corruption
- CVSS 7.9 High
REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure
- OP-TEE optee_os
- CWE-755
- CVSS 7.4 High
OP-TEE double free in shdr_verify_signature
- OP-TEE optee_os
- Memory corruption
- CVSS 8.2 High
OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function
- OP-TEE optee_os
- CWE-129