OP-TEE

Records91All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical18CVSS 9.0–10.0

CVSS high34CVSS 7.0–8.9

Exploited now

OP-TEE records in CISA KEV

TI-2021-09019 Arm Trusted Firmware Out-of-Bounds Write Vulnerability HIGH 82KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Mbed Tls 41 records MEDIUM Op-tee 29 records HIGH Trusted Firmware-a 7 records LOW Trusted Firmware-m 6 records HIGH Tf-psa-crypto 3 records MEDIUM

Records

91 records

TI-2021-09019 CVE-2021-27562 · GHSA-3352-gx8m-f7v5

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an…

HIGH 82KEV

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0306 Published 2021-05-25 No fix listed CWE-787

TI-2022-22796 CVE-2022-46152

OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function

HIGH 73

OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00491 Published 2022-11-29 Fixed in 3.19.0 CWE-129

TI-2026-29072 CVE-2026-40290

OP-TEE has a Use-After-Free race in FF-A shared-memory teardown

HIGH 69

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00187 Published 2026-06-03 Fixed in 4.11.0 CWE-416

TI-2025-29404 CVE-2025-46733

REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure

HIGH 68

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.0017 Published 2025-07-04 No fix listed CWE-755

TI-2023-21925 CVE-2023-41325

OP-TEE double free in shdr_verify_signature

HIGH 68

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1HIGH 7.4 Local High privileges User interaction EPSS 0.00386 Published 2023-09-15 Fixed in 3.22 CWE-415

TI-2026-33359 CVE-2026-45614

OP-TEE vulnerable to ECDH private key recovery

MEDIUM 55

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00096 Published 2026-06-03 Fixed in 4.11.0 CWE-347

TI-2023-24211 CVE-2023-45199 · GHSA-9xgp-crg4-hgxq

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

MEDIUM 51

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01258 Published 2023-10-07 No fix listed CWE-120

TI-2022-22925 CVE-2022-46393 · GHSA-pjwj-r3p9-jjrq

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0.

MEDIUM 51

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01255 Published 2022-12-15 No fix listed CWE-125

TI-2024-32797 CVE-2024-49195 · GHSA-24jq-7r79-4823

Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair

MEDIUM 50

Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2024-10-15 No fix listed CWE-787

TI-2024-30255 CVE-2024-45158 · GHSA-hw5v-7r63-g2h6

An issue was discovered in Mbed TLS 3.6 before 3.6.1.

MEDIUM 50

An issue was discovered in Mbed TLS 3.6 before 3.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00683 Published 2024-09-05 No fix listed CWE-121

TI-2026-27113 CVE-2026-34877 · GHSA-xg3m-c464-j5fh

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.

MEDIUM 49

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2026-04-02 No fix listed CWE-250

TI-2026-27111 CVE-2026-34875 · GHSA-g3pc-q77x-rjjp

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.

MEDIUM 49

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00373 Published 2026-04-01 No fix listed CWE-120

TI-2024-30256 CVE-2024-45159 · GHSA-cr54-4mf7-rg5v

An issue was discovered in Mbed TLS 3.x before 3.6.1.

MEDIUM 49

An issue was discovered in Mbed TLS 3.x before 3.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2024-09-05 No fix listed CWE-295

TI-2019-16063 CVE-2019-1010298 · GHSA-36rf-59vx-v4gr

Integer overflow in OP-TEE

MEDIUM 49

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03955 Published 2019-07-15 No fix listed CWE-190

TI-2026-27109 CVE-2026-34873 · GHSA-q24g-gcpv-7264

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.

MEDIUM 47

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00251 Published 2026-04-01 No fix listed CWE-287

TI-2024-19917 CVE-2024-30166 · GHSA-jqcx-vw98-5q84

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information…

MEDIUM 47

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 Clie…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0073 Published 2024-04-03 No fix listed CWE-121

TI-2021-20246 CVE-2021-44732 · GHSA-7g56-f7p4-fmcq

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as…

MEDIUM 47

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0277 Published 2021-12-20 No fix listed CWE-415

TI-2019-16062 CVE-2019-1010297 · GHSA-fq75-vq38-pj5v

Integer overflow in OP-TEE

MEDIUM 47

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02799 Published 2019-07-15 No fix listed CWE-190

TI-2019-16061 CVE-2019-1010296 · GHSA-48wf-8584-rpqx

Integer overflow in OP-TEE

MEDIUM 47

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02855 Published 2019-07-15 No fix listed CWE-190

TI-2019-16060 CVE-2019-1010295 · GHSA-6535-4cfw-5c33

Out-of-bounds read in OP-TEE

MEDIUM 45

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01661 Published 2019-07-15 No fix listed CWE-125

TI-2019-16058 CVE-2019-1010293 · GHSA-43r2-vc56-g759

Out-of-bounds write in OP-TEE

MEDIUM 45

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01583 Published 2019-07-15 No fix listed CWE-787

TI-2019-16057 CVE-2019-1010292 · GHSA-c3xq-266q-8gcx

Out-of-bounds write in OP-TEE

MEDIUM 45

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01583 Published 2019-07-16 No fix listed CWE-787

TI-2022-15985 CVE-2022-35409 · GHSA-m52q-qpp4-f753

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0.

MEDIUM 44

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.023 Published 2022-07-15 No fix listed CWE-125

TI-2024-19151 CVE-2024-28960 · GHSA-6h48-8w2f-5w94

An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before…

MEDIUM 43

An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0084 Published 2024-03-29 No fix listed CWE-284

TI-2024-15775 CVE-2024-23775 · GHSA-fgff-579x-65fj

Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows…

MEDIUM 41

Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension().

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01111 Published 2024-01-31 No fix listed CWE-190

Open these records in search →