What is the CVSS score of CVE-2026-41516?

CVE-2026-41516 has a CVSS 3.1 base score of 3.3 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2026-41516?

Yes, a patch is available for CVE-2026-41516. Update the affected software to the latest version immediately.

OP-TEE optee_os CVE-2026-41516

EUVD-2026-41908 LOW

Observable Timing Discrepancy (CWE-208)

2026-07-06 GitHub_M

Linux Oracle Information Disclosure Optee Os

3.3

CVSS 3.1 · NVD

Severity by source

Vendor (GitHub_M) PRIMARY

LOW

qualitative

NVD

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

2.5 LOW

Local vector and low privileges required to submit TEE requests; high complexity reflects the many-query Bleichenbacher oracle; limited confidentiality only, no integrity or availability impact.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

CVSS changed

Jul 07, 2026 - 19:07 NVD

2.5 (LOW) 3.3 (LOW)

Patch available

Jul 06, 2026 - 21:16 EUVD

Analysis Generated

Jul 06, 2026 - 20:09 vuln.today

DescriptionNVD

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS#1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver uses non-constant-time memcmp() for label hash verification and has multiple distinguishable error paths. This creates a Bleichenbacher-style padding oracle that allows an attacker to recover RSA PKCS#1 v1.5 plaintext. Version 4.11.0 contains a patch. As a workaround, disable Hisilicon HPRE RSA driver with CFG_HISILICON_ACC_V3=n.

AnalysisAI

RSA PKCS#1 v1.5 decryption in OP-TEE's Hisilicon HPRE hardware accelerator driver exposes a Bleichenbacher-style padding oracle, allowing a local attacker to recover RSA plaintext by adaptively querying the oracle. Affected are optee_os versions 4.5.0 through 4.10.x built with Hisilicon HPRE support (CFG_HISILICON_ACC_V3=y) on Arm TrustZone-based platforms. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Gain local low-privilege REE access

Delivery

Submit crafted RSA PKCS#1 v1.5 ciphertexts to TEE via client API

Exploit

Observe timing or error-path differences from non-constant-time memcmp

Execution

Iteratively refine ciphertexts per Bleichenbacher algorithm

Impact

Recover RSA plaintext

Access

Gain local low-privilege REE access

Delivery

Submit crafted RSA PKCS#1 v1.5 ciphertexts to TEE via client API

Exploit

Observe timing or error-path differences from non-constant-time memcmp

Execution

Iteratively refine ciphertexts per Bleichenbacher algorithm

Impact

Recover RSA plaintext

Vulnerability AssessmentAI

Exploitation	Exploitation requires: (1) the target system runs OP-TEE OS version 4.5.0 or later but prior to 4.11.0, compiled with CFG_HISILICON_ACC_V3=y - this is not the default for all platforms and is specific to Hisilicon HPRE hardware; (2) RSA PKCS#1 v1.5 decryption operations are performed via the Hisilicon HPRE driver path, not a software fallback; (3) the attacker has local, low-privilege access to submit RSA decryption requests to a Trusted Application and observe timing or error differentiation. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 base score of 2.5 (AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) accurately reflects the constrained risk profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A local attacker with low-privilege access to the normal-world Linux environment on a Hisilicon Kunpeng platform running a vulnerable OP-TEE build submits tens of thousands of adaptively crafted RSA PKCS#1 v1.5 ciphertexts to a Trusted Application via the TEE client API, measuring timing differences or distinguishing error codes returned by the HPRE driver's non-constant-time memcmp() and branching error paths. By iteratively refining the queries per the Bleichenbacher algorithm, the attacker narrows the RSA plaintext space and eventually recovers the target plaintext. …
Remediation	Upgrade to OP-TEE OS version 4.11.0, which contains the fix for this padding oracle (vendor-confirmed via GHSA-wxp6-8wwr-h4gf). … Detailed patch versions, workarounds, and compensating controls in full report.