OP-TEE Trusted OS Buffer Overflow Vulnerability

OP-TEE Trusted OS is an open source Trusted Execution Environment (TEE) from OP-TEE that implements Arm TrustZone technology. buffer overflow vulnerability exists in versions of OP-TEE Trusted OS prior to 3.19.0, which stems from an unvalidated “num_params” parameter, and can be exploited to cause out-of-bounds reads.