CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-53763

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.0.0 and prior to version 4.11.0, 32-bit integer overflows in OP-TEE core's AES-GCM implementation cause the authentication tag to be computed with incorrect bit-length values after processing more than 512 megabytes of payload or Additional Authenticated Data (AAD). Version 4.11.0 contains a patch. No known workarounds are available.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 4.5%

CVSS Severity

CVSS v3 Score 3.8

References

https://github.com/OP-TEE/optee_os/security/advisories/GHSA-fcm8-vjhf-6vqh

Products affected by CVE-2026-53763

Trustedfirmware » Op-Tee » Version: 3.0.0

cpe:2.3:o:trustedfirmware:op-tee:3.0.0
Trustedfirmware » Op-Tee » Version: 3.1.0

cpe:2.3:o:trustedfirmware:op-tee:3.1.0
Trustedfirmware » Op-Tee » Version: 3.10.0

cpe:2.3:o:trustedfirmware:op-tee:3.10.0
Trustedfirmware » Op-Tee » Version: 3.11.0

cpe:2.3:o:trustedfirmware:op-tee:3.11.0
Trustedfirmware » Op-Tee » Version: 3.12.0

cpe:2.3:o:trustedfirmware:op-tee:3.12.0
Trustedfirmware » Op-Tee » Version: 3.13.0

cpe:2.3:o:trustedfirmware:op-tee:3.13.0
Trustedfirmware » Op-Tee » Version: 3.14.0

cpe:2.3:o:trustedfirmware:op-tee:3.14.0
Trustedfirmware » Op-Tee » Version: 3.15.0

cpe:2.3:o:trustedfirmware:op-tee:3.15.0
Trustedfirmware » Op-Tee » Version: 3.16.0

cpe:2.3:o:trustedfirmware:op-tee:3.16.0
Trustedfirmware » Op-Tee » Version: 3.17.0

cpe:2.3:o:trustedfirmware:op-tee:3.17.0
Trustedfirmware » Op-Tee » Version: 3.18.0

cpe:2.3:o:trustedfirmware:op-tee:3.18.0
Trustedfirmware » Op-Tee » Version: 3.19.0

cpe:2.3:o:trustedfirmware:op-tee:3.19.0
Trustedfirmware » Op-Tee » Version: 3.2.0

cpe:2.3:o:trustedfirmware:op-tee:3.2.0
Trustedfirmware » Op-Tee » Version: 3.20.0

cpe:2.3:o:trustedfirmware:op-tee:3.20.0
Trustedfirmware » Op-Tee » Version: 3.21.0

cpe:2.3:o:trustedfirmware:op-tee:3.21.0
Trustedfirmware » Op-Tee » Version: 3.22.0

cpe:2.3:o:trustedfirmware:op-tee:3.22.0
Trustedfirmware » Op-Tee » Version: 3.3.0

cpe:2.3:o:trustedfirmware:op-tee:3.3.0
Trustedfirmware » Op-Tee » Version: 3.4.0

cpe:2.3:o:trustedfirmware:op-tee:3.4.0
Trustedfirmware » Op-Tee » Version: 3.5.0

cpe:2.3:o:trustedfirmware:op-tee:3.5.0
Trustedfirmware » Op-Tee » Version: 3.6.0

cpe:2.3:o:trustedfirmware:op-tee:3.6.0
Trustedfirmware » Op-Tee » Version: 3.7.0

cpe:2.3:o:trustedfirmware:op-tee:3.7.0
Trustedfirmware » Op-Tee » Version: 3.8.0

cpe:2.3:o:trustedfirmware:op-tee:3.8.0
Trustedfirmware » Op-Tee » Version: 3.9.0

cpe:2.3:o:trustedfirmware:op-tee:3.9.0
Trustedfirmware » Op-Tee » Version: 4.0.0

cpe:2.3:o:trustedfirmware:op-tee:4.0.0
Trustedfirmware » Op-Tee » Version: 4.1.0

cpe:2.3:o:trustedfirmware:op-tee:4.1.0
Trustedfirmware » Op-Tee » Version: 4.10.0

cpe:2.3:o:trustedfirmware:op-tee:4.10.0
Trustedfirmware » Op-Tee » Version: 4.2.0

cpe:2.3:o:trustedfirmware:op-tee:4.2.0
Trustedfirmware » Op-Tee » Version: 4.3.0

cpe:2.3:o:trustedfirmware:op-tee:4.3.0
Trustedfirmware » Op-Tee » Version: 4.4.0

cpe:2.3:o:trustedfirmware:op-tee:4.4.0
Trustedfirmware » Op-Tee » Version: 4.5.0

cpe:2.3:o:trustedfirmware:op-tee:4.5.0
Trustedfirmware » Op-Tee » Version: 4.6.0

cpe:2.3:o:trustedfirmware:op-tee:4.6.0
Trustedfirmware » Op-Tee » Version: 4.7.0

cpe:2.3:o:trustedfirmware:op-tee:4.7.0
Trustedfirmware » Op-Tee » Version: 4.8.0

cpe:2.3:o:trustedfirmware:op-tee:4.8.0
Trustedfirmware » Op-Tee » Version: 4.9.0

cpe:2.3:o:trustedfirmware:op-tee:4.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-53763

Products

Pricing

Contact Us