Vulnerabilities > OP TEE
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-11-29 | CVE-2022-46152 | Improper Validation of Array Index vulnerability in Op-Tee OS OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. | 8.8 |
| 2017-02-13 | CVE-2016-6129 | Improper Input Validation vulnerability in multiple products The rsa_verify_hash_ex function in rsa_verify_hash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA signatures or public certificates by leveraging a Bleichenbacher signature forgery attack. | 7.5 |