op-tee Schwachstellen (CVE)

Für op-tee veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

17 Ergebnisse
2.5Niedrig
CVE-2026-41516

OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS#1 v1.5 decryption implementat…

3.3Niedrig
CVE-2026-41434

OP-TEE has unbounded recursion in sanitize_client_object()

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS…

5.5Mittel
CVE-2026-40257

OP-TEE has SHA-3 accelerated finalize heap overflow

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA…

4.7Mittel
CVE-2026-45614

OP-TEE vulnerable to ECDH private key recovery

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of the ECDH shared secret paths, the public key isn't verified t…

8.7Hoch
CVE-2026-33317

OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, missing checks in `entry_get_attribute_value()` in `ta/pkcs11…