Read the docs

OP-TEE

Records91All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high34CVSS 7.0–8.9

Exploited now

OP-TEE records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

29 records in Op-tee · all components

Priority HIGH 69

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00187 Published 2026-06-03 Fixed in 4.11.0 CWE-416
Priority HIGH 68

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1HIGH 7.4 Local High privileges User interaction EPSS 0.00386 Published 2023-09-15 Fixed in 3.22 CWE-415
Priority MEDIUM 55

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00096 Published 2026-06-03 Fixed in 4.11.0 CWE-347
TI-2019-16063 CVE-2019-1010298 · GHSA-36rf-59vx-v4gr

Integer overflow in OP-TEE

Priority MEDIUM 49

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03955 Published 2019-07-15 No fix listed CWE-190
TI-2019-16062 CVE-2019-1010297 · GHSA-fq75-vq38-pj5v

Integer overflow in OP-TEE

Priority MEDIUM 47

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02799 Published 2019-07-15 No fix listed CWE-190
TI-2019-16061 CVE-2019-1010296 · GHSA-48wf-8584-rpqx

Integer overflow in OP-TEE

Priority MEDIUM 47

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02855 Published 2019-07-15 No fix listed CWE-190
TI-2019-16060 CVE-2019-1010295 · GHSA-6535-4cfw-5c33

Out-of-bounds read in OP-TEE

Priority MEDIUM 45

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01661 Published 2019-07-15 No fix listed CWE-125
TI-2019-16058 CVE-2019-1010293 · GHSA-43r2-vc56-g759

Out-of-bounds write in OP-TEE

Priority MEDIUM 45

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01583 Published 2019-07-15 No fix listed CWE-787
TI-2019-16057 CVE-2019-1010292 · GHSA-c3xq-266q-8gcx

Out-of-bounds write in OP-TEE

Priority MEDIUM 45

Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01583 Published 2019-07-16 No fix listed CWE-787
Priority LOW 39

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1HIGH 8.7 Local Low privileges No interaction EPSS 0.00185 Published 2026-04-24 No fix listed CWE-125
TI-2019-16059 CVE-2019-1010294 · GHSA-5cjv-pr2v-wwm4

Numeric error in OP-TEE

Priority LOW 36

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01447 Published 2019-07-15 No fix listed CWE-189
Priority LOW 31

An unprotected memory-access operation in optee_os in TrustedFirmware Open Portable Trusted Execution Environment (OP-TEE) before 3.20 allows a physically proximate adversary to bypass signature verification and install…

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00417 Published 2022-12-19 No fix listed CWE-347
Priority LOW 30

Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00294 Published 2020-11-18 No fix listed CWE-294
Priority LOW 24

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00153 Published 2026-07-06 Fixed in 4.11.0 CWE-787
Load more
Open these records in search →