CVE-2026-45702

>= 4.3.0 and <= 4.10.0

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores

4.4MEDIUM

CVE-2026-45614

<= 4.10.0

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores

4.7MEDIUM

CVE-2026-40290

>= 3.16.0 and <= 4.10.0

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores

7.8HIGH

CVE-2026-33662

>= 3.8.0 and <= 4.10.0

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores

7.5HIGH

CVE-2026-33317

>= 3.13.0 and <= 4.10.0

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores

8.7HIGH

CVE-2023-41325

>= 3.20.0 and < 3.22.0

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores

7.4HIGH

CVE-2022-47549

< 3.20

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before

6.4MEDIUM

CVE-2022-46152

< 3.19.0

OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0,

8.2HIGH

CVE-2021-44149

<= 3.15.0

An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices

7.8HIGH

CVE-2021-36133

all versions

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone by

7.1HIGH

CVE-2019-25052

< 3.7.0

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic func

9.1CRITICAL

CVE-2020-13799

<= 3.11.0

Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multi

6.8MEDIUM

CVE-2019-1010292

< 3.4.0

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any

9.8CRITICAL

CVE-2019-1010298

<= 3.3.0

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (

9.8CRITICAL

CVE-2019-1010297

<= 3.3.0

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) cont

9.8CRITICAL

CVE-2019-1010296

<= 3.3.0

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kern

9.8CRITICAL

CVE-2019-1010295

<= 3.3.0

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure of memory

9.8CRITICAL

CVE-2019-1010294

<= 3.3.0

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or data from pr

7.5HIGH

CVE-2019-1010293

<= 3.3.0

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE itself. The

9.8CRITICAL

CVE-2018-12437

<= 3.5.0

LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Prob

4.9MEDIUM

CVE-2017-1000413

<= 2.4.0

Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts o

5.9MEDIUM

CVE-2017-1000412

<= 2.4.0

Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt

7.5HIGH

CVE-2016-6129

< 2.2.0

The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the me

7.5HIGH