CVE-2026-53763: falha de baixa gravidade em OP-TEE optee_os
OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.8epss 0.2%
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the authentication tag to be computed with incorrect bit-length values after processing more than 512 megabytes of payload or Additional Authenticated Data (AAD). Version 4.11.0 contains a patch. No known workarounds are available.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
OP-TEE · optee_osCVEs relacionadas — OP-TEE optee_os
No mesmo produto, das mais perigosas para as menos.
CVE-2022-46152HIGHOP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs functionEPSS 0.5%CVE-2026-33662HIGHOP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()EPSS 0.4%CVE-2023-41325HIGHOP-TEE double free in shdr_verify_signatureEPSS 0.4%CVE-2026-40290HIGHOP-TEE has a Use-After-Free race in FF-A shared-memory teardownEPSS 0.2%CVE-2026-33317HIGHOP-TEE: PKCS#11 TA out-of-bounds read and memory disclosureEPSS 0.2%CVE-2026-71969HIGHOP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt OperationsEPSS 0.2%