Vulnerabilities > Linaro > OP TEE > High

DATE CVE VULNERABILITY TITLE RISK
2021-12-07 CVE-2021-36133 Incorrect Permission Assignment for Critical Resource vulnerability in Linaro Op-Tee
The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory.
local
low complexity
linaro CWE-732
7.1
2021-12-07 CVE-2021-44149 Unspecified vulnerability in Linaro Op-Tee
An issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0.
local
low complexity
linaro
7.8
2019-07-15 CVE-2019-1010294 Numeric Errors vulnerability in Linaro Op-Tee
Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error.
network
low complexity
linaro CWE-189
7.5
2018-01-02 CVE-2017-1000412 Information Exposure vulnerability in Linaro Op-Tee
Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key.
network
low complexity
linaro CWE-200
7.5