Skip to content
OpenAdvisories

Vendor

OP-TEE

19 known vulnerabilities.

Products

optee_os 19
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.8
    CVE-2026-40290

    OP-TEE has a Use-After-Free race in FF-A shared-memory teardown

    OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.16.0 and prior to 4.11.0, a user-after-free (UAF) race condition exists in …

    OP-TEE optee_os optee-os optee-os Debian Ubuntu
  • High 7.5
    CVE-2026-33662

    OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()

    OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. From 3.8.0 to 4.10, in the function emsa_pkcs1_v1_5_encode() in core/drivers/crypto/crypto_api/ac…

    OP-TEE optee_os optee-os optee-os Debian Ubuntu
  • High 8.7
    CVE-2026-33317 Public exploit

    OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure

    OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, missing checks in `entry_get_attribute_value()` in `ta/pkcs11/…

    OP-TEE optee_os optee-os optee-os Debian Ubuntu
  • High 7.9
    CVE-2025-46733

    REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure

    OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In version 4.5.0, using a specially crafted tee-supplicant binary running in REE userspace, an at…

    OP-TEE optee_os optee-os Debian
  • High 7.4
    CVE-2023-41325

    OP-TEE double free in shdr_verify_signature

    OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.20 and prior to version 3.22, `shdr_verify_signature` can make a double fre…

    OP-TEE optee_os
  • High 8.2
    CVE-2022-46152 Public exploit

    OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function

    OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_co…

    OP-TEE optee_os