Vulnerabilidades de op-tee (CVE)

Registros CVE publicados para op-tee, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

17 resultados
2.5Baja
CVE-2026-41516

OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS#1 v1.5 decryption implementat…

3.3Baja
CVE-2026-41434

OP-TEE has unbounded recursion in sanitize_client_object()

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS…

5.5Media
CVE-2026-40257

OP-TEE has SHA-3 accelerated finalize heap overflow

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA…

4.7Media
CVE-2026-45614

OP-TEE vulnerable to ECDH private key recovery

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Prior to version 4.11.0, on many of the ECDH shared secret paths, the public key isn't verified t…

8.7Alta
CVE-2026-33317

OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure

OP-TEE optee_os

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. In versions 3.13.0 through 4.10.0, missing checks in `entry_get_attribute_value()` in `ta/pkcs11…