agentprime: op-tee-optee-osEvery new CVE for op-tee-optee-os.https://agentprime.io/CVE-2026-71969: OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operationshttps://agentprime.io/advisories/CVE-2026-71969/https://agentprime.io/advisories/CVE-2026-71969/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 18:18:43 GMTCVECVE-2026-71968: OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENThttps://agentprime.io/advisories/CVE-2026-71968/https://agentprime.io/advisories/CVE-2026-71968/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 18:15:10 GMTCVECVE-2026-71967: OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_sessionhttps://agentprime.io/advisories/CVE-2026-71967/https://agentprime.io/advisories/CVE-2026-71967/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 18:11:01 GMTCVECVE-2026-53763: OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guaranteehttps://agentprime.io/advisories/CVE-2026-53763/https://agentprime.io/advisories/CVE-2026-53763/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 19:35:39 GMTCVECVE-2026-44362: OP-TEE's subkey rollback protection can be bypassed with older subkey versionshttps://agentprime.io/advisories/CVE-2026-44362/https://agentprime.io/advisories/CVE-2026-44362/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 19:33:48 GMTCVECVE-2026-42546: OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj referenceshttps://agentprime.io/advisories/CVE-2026-42546/https://agentprime.io/advisories/CVE-2026-42546/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 19:31:56 GMTCVECVE-2026-41516: OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oraclehttps://agentprime.io/advisories/CVE-2026-41516/https://agentprime.io/advisories/CVE-2026-41516/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 19:27:32 GMTCVECVE-2026-41515: OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recoveryhttps://agentprime.io/advisories/CVE-2026-41515/https://agentprime.io/advisories/CVE-2026-41515/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 19:25:10 GMTCVECVE-2026-41514: OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recoveryhttps://agentprime.io/advisories/CVE-2026-41514/https://agentprime.io/advisories/CVE-2026-41514/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 19:06:36 GMTCVECVE-2026-41434: OP-TEE has unbounded recursion in sanitize_client_object()https://agentprime.io/advisories/CVE-2026-41434/https://agentprime.io/advisories/CVE-2026-41434/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 17:24:40 GMTCVECVE-2026-40257: OP-TEE has SHA-3 accelerated finalize heap overflowhttps://agentprime.io/advisories/CVE-2026-40257/https://agentprime.io/advisories/CVE-2026-40257/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Jul 2026 16:26:20 GMTCVECVE-2026-45702: OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panichttps://agentprime.io/advisories/CVE-2026-45702/https://agentprime.io/advisories/CVE-2026-45702/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 17:55:18 GMTCVECVE-2026-45614: OP-TEE vulnerable to ECDH private key recoveryhttps://agentprime.io/advisories/CVE-2026-45614/https://agentprime.io/advisories/CVE-2026-45614/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 17:53:47 GMTCVECVE-2026-40290: OP-TEE has a Use-After-Free race in FF-A shared-memory teardownhttps://agentprime.io/advisories/CVE-2026-40290/https://agentprime.io/advisories/CVE-2026-40290/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Jun 2026 16:45:51 GMTCVECVE-2026-33662: OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()https://agentprime.io/advisories/CVE-2026-33662/https://agentprime.io/advisories/CVE-2026-33662/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 18:13:28 GMTCVECVE-2026-33317: OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosurehttps://agentprime.io/advisories/CVE-2026-33317/https://agentprime.io/advisories/CVE-2026-33317/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Apr 2026 02:20:55 GMTCVECVE-2025-46733: REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosurehttps://agentprime.io/advisories/CVE-2025-46733/https://agentprime.io/advisories/CVE-2025-46733/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Jul 2025 13:13:53 GMTCVECVE-2023-41325: OP-TEE double free in shdr_verify_signaturehttps://agentprime.io/advisories/CVE-2023-41325/https://agentprime.io/advisories/CVE-2023-41325/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Sep 2023 19:40:58 GMTCVECVE-2022-46152: OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs functionhttps://agentprime.io/advisories/CVE-2022-46152/https://agentprime.io/advisories/CVE-2022-46152/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Nov 2022 00:00:00 GMTCVE