Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.7%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
Products affected by CVE-2019-25052
  • Linaro » Op-Tee » Version: N/A
    cpe:2.3:o:linaro:op-tee:-
  • Linaro » Op-Tee » Version: 0.1.0
    cpe:2.3:o:linaro:op-tee:0.1.0
  • Linaro » Op-Tee » Version: 0.2.0
    cpe:2.3:o:linaro:op-tee:0.2.0
  • Linaro » Op-Tee » Version: 0.3.0
    cpe:2.3:o:linaro:op-tee:0.3.0
  • Linaro » Op-Tee » Version: 1.0.0
    cpe:2.3:o:linaro:op-tee:1.0.0
  • Linaro » Op-Tee » Version: 1.0.1
    cpe:2.3:o:linaro:op-tee:1.0.1
  • Linaro » Op-Tee » Version: 1.1.0
    cpe:2.3:o:linaro:op-tee:1.1.0
  • Linaro » Op-Tee » Version: 2.0.0
    cpe:2.3:o:linaro:op-tee:2.0.0
  • Linaro » Op-Tee » Version: 2.1.0
    cpe:2.3:o:linaro:op-tee:2.1.0
  • Linaro » Op-Tee » Version: 2.2.0
    cpe:2.3:o:linaro:op-tee:2.2.0
  • Linaro » Op-Tee » Version: 2.3.0
    cpe:2.3:o:linaro:op-tee:2.3.0
  • Linaro » Op-Tee » Version: 2.4.0
    cpe:2.3:o:linaro:op-tee:2.4.0
  • Linaro » Op-Tee » Version: 2.5.0
    cpe:2.3:o:linaro:op-tee:2.5.0
  • Linaro » Op-Tee » Version: 2.6.0
    cpe:2.3:o:linaro:op-tee:2.6.0
  • Linaro » Op-Tee » Version: 3.0.0
    cpe:2.3:o:linaro:op-tee:3.0.0
  • Linaro » Op-Tee » Version: 3.1.0
    cpe:2.3:o:linaro:op-tee:3.1.0
  • Linaro » Op-Tee » Version: 3.2.0
    cpe:2.3:o:linaro:op-tee:3.2.0
  • Linaro » Op-Tee » Version: 3.3.0
    cpe:2.3:o:linaro:op-tee:3.3.0
  • Linaro » Op-Tee » Version: 3.4.0
    cpe:2.3:o:linaro:op-tee:3.4.0
  • Linaro » Op-Tee » Version: 3.5.0
    cpe:2.3:o:linaro:op-tee:3.5.0
  • Linaro » Op-Tee » Version: 3.6.0
    cpe:2.3:o:linaro:op-tee:3.6.0


Contact Us

Shodan ® - All rights reserved