OP-TEE vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20231
3. 20251
4. 202616

Newest CVEs

• CVE-2026-71969

  OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations

  OP-TEE · optee_os

  High8.4
• CVE-2026-71968

  OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT

  OP-TEE · optee_os

  High8.4
• CVE-2026-71967

  OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session

  OP-TEE · optee_os

  Medium5.7
• CVE-2026-53763

  OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee

  OP-TEE · optee_os

  Low3.8
• CVE-2026-44362

  OP-TEE's subkey rollback protection can be bypassed with older subkey versions

  OP-TEE · optee_os

  Medium5.5
• CVE-2026-42546

  OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references

  OP-TEE · optee_os

  Low3.8
• CVE-2026-41516

  OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle

  OP-TEE · optee_os

  Low2.5
• CVE-2026-41515

  OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery

  OP-TEE · optee_os

  Low2.5
• CVE-2026-41514

  OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery

  OP-TEE · optee_os

  Low2.5
• CVE-2026-41434

  OP-TEE has unbounded recursion in sanitize_client_object()

  OP-TEE · optee_os

  Low3.3