Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

OP-TEE Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-71969`OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations	Exploitation statusPublic exploit	FixYes	Affected productoptee_os	Published08/10/2026	SeverityHigh
`CVE-2026-71968`OP-TEE OS 4.10.0 Use-After-Free via Trusted Application Loader TA_FLAG_CONCURRENT	Exploitation statusNot known exploited	FixYes	Affected productoptee_os	Published08/10/2026	SeverityHigh
`CVE-2026-71967`OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session	Exploitation statusNot known exploited	FixYes	Affected productoptee_os	Published08/10/2026	SeverityMedium
`CVE-2026-53763`OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityLow
`CVE-2026-44362`OP-TEE's subkey rollback protection can be bypassed with older subkey versions	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityMedium
`CVE-2026-42546`OP-TEE has missing OPTEE_MSG_ATTR_TYPE_MASK in cleanup_shm_refs() leaks mobj references	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityLow
`CVE-2026-41516`OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityLow
`CVE-2026-41515`OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityLow
`CVE-2026-41514`OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityLow
`CVE-2026-41434`OP-TEE has unbounded recursion in sanitize_client_object()	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityLow
`CVE-2026-40257`OP-TEE has SHA-3 accelerated finalize heap overflow	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published07/06/2026	SeverityMedium
`CVE-2026-45702`OP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panic	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published06/03/2026	SeverityMedium
`CVE-2026-45614`OP-TEE vulnerable to ECDH private key recovery	Exploitation statusPublic exploit	FixNot confirmed	Affected productoptee_os	Published06/03/2026	SeverityMedium
`CVE-2026-40290`OP-TEE has a Use-After-Free race in FF-A shared-memory teardown	Exploitation statusPublic exploit	FixNot confirmed	Affected productoptee_os	Published06/03/2026	SeverityHigh
`CVE-2026-33662`OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published04/24/2026	SeverityHigh
`CVE-2026-33317`OP-TEE: PKCS#11 TA out-of-bounds read and memory disclosure	Exploitation statusNot known exploited	FixNot confirmed	Affected productoptee_os	Published04/24/2026	SeverityHigh
`CVE-2025-46733`REE userspace code can panic TAs, leading to fTPM PCR reset and data disclosure	Exploitation statusPublic exploit	FixYes	Affected productoptee_os	Published07/04/2025	SeverityHigh
`CVE-2023-41325`OP-TEE double free in shdr_verify_signature	Exploitation statusPublic exploit	FixYes	Affected productoptee_os	Published09/15/2023	SeverityHigh
`CVE-2022-46152`OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs function	Exploitation statusPublic exploit	FixNot confirmed	Affected productoptee_os	Published11/29/2022	SeverityHigh
`CVE-2016-6129`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published02/13/2017	SeverityUnknown

20 / 20 Results

All vulnerabilities loaded

Security vulnerabilities from OP-TEE

OP-TEE

How many security vulnerabilities does OP-TEE have?

Which OP-TEE product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular OP-TEE products

optee_os