201 matches found
CVE-2022-46152
CVE-2022-46152 OP-TEE OScleanupshmrefs 領域外読み取り — 再現環境 Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 脆弱性概要 項目| 詳細 ---|--- 脆弱性| cleanupshmrefs は numparams...
optee_ftpm
OP-TEE 向け MS TPM 2.0 リファレンス実装 fTPM 統合 fTPM TA fTPM トラステッドアプリケーション TA は、MS リファレンス実装 を使用して TPM の安全なファームウェア実装を提供します。 プラットフォーム固有の統合コードはこのリポジトリに保持されています。 これは、OP-TEE で動作するようにメンテナンスされた MS リファレンス実装 サンプルの ARM32-FirmwareTPM からのフォークです。 TA のビルド この TA は、OP-TEE ドキュメント の Trusted Applications...
CVE-2026-33317
CVE-2026-33317 OP-TEE PKCS11 PoC このリポジトリには、CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9 に関するNormal Worldの概念実証（PoC）、再現手順、および取得したログが含まれています。 公式のOP-TEEアドバイザリでは、PKCS11CMDGETATTRIBUTEVALUE に対する entrygetattributevalue における検証欠落が説明されています。このバグにより、PKCS11...
optee-qemu
CVE-2021-44733：Linux 内核 TEE 子系统中释放后使用漏洞的模糊测试与利用 最近，在 Linux 内核 TEE 子系统中发现了一个释放后使用漏洞，影响版本直至并包括 5.15.11，已分配编号 CVE-2021-44733 1。 乍一看，由于多种原因，它似乎不可利用；然而，在进一步分析漏洞代码路径并实现一个粗糙的概念验证漏洞利用后，可以覆盖内核中的函数指针。本文不提供权限提升载荷，但运行 OPTEE 和该漏洞利用的完整环境可供进一步测试，请参阅“设置环境”部分。 背景 TEE（可信执行环境，Trusted Execution...
CVE-2019-1010298
CVE-2019-1010298 OP-TEE-2018-0011 seccampの講義で使用されました。...
SUSE CVE-2026-80524
In the Linux kernel, the following vulnerability has been resolved: optee: ffa: Add NULL check in opteeffalendprotmem Sashiko locally reports a possible null dereference under memory pressure due to the lack of validation of the allocated pointer. Fix that by adding the missing check...
CVE-2026-80524
A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment Fast Fault-tolerant Architecture FFA component. A local attacker could exploit a missing null check when allocating protected memory. Under specific memory pressure conditions, this could lead to a null...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099790)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099790 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100743)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100743 advisory. In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a19...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
DEBIAN-CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...
CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...
UBUNTU-CVE-2026-71967
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...
CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
UBUNTU-CVE-2026-71969
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...
UBUNTU-CVE-2026-71968
OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory by setting the TAFLAGCONCURRENT flag in a user TA signed...
CVE-2026-71969 OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations
OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...