EUVD-2026-41891Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Local vector and low privileges confirmed; integrity set to High because heap corruption of TEE kernel memory constitutes a meaningful integrity violation beyond mere crash.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.21.0 and prior to version 4.11.0, the ARM Crypto Extensions accelerated SHA-3 implementation has an off-by-one error that can cause a massive heap overflow that corrupts all TEE kernel memory following the hash state. This affects all platforms built with CFG_CRYPTO_WITH_CE82=y (ARMv8.2+ with SHA3 Crypto Extensions). Version 4.11.0 contains a patch. As a workaround, disable SHA3 Crypto Extensions with CFG_CRYPTO_WITH_CE82=n.
AnalysisAI
Heap overflow in OP-TEE's ARM Crypto Extensions SHA-3 implementation corrupts TEE kernel memory across all platforms built with CFG_CRYPTO_WITH_CE82=y (ARMv8.2+ SHA3 extensions). The off-by-one error in the accelerated SHA-3 path overwrites memory beyond the hash state buffer, potentially corrupting all TEE kernel heap memory that follows. Affected versions span 3.21.0 through 4.11.0, and no public exploit has been identified at time of analysis, though the memory corruption primitive is significant in the context of a secure enclave.
Technical ContextAI
OP-TEE (Open Portable Trusted Execution Environment) is a secure-world OS running on ARM TrustZone-enabled Cortex-A processors alongside a normal Linux kernel. The vulnerability resides in the hardware-accelerated SHA-3 code path enabled when OP-TEE is compiled with CFG_CRYPTO_WITH_CE82=y, targeting ARMv8.2+ platforms that expose the SHA-3 ARM Crypto Extension instructions. CWE-787 (Out-of-Bounds Write) identifies the root cause: an off-by-one miscalculation in the buffer indexing logic causes the SHA-3 state to be written one position beyond the allocated heap buffer. Because TEE heap is contiguous, this corrupts all kernel-managed memory structures following the hash state, which may include cryptographic keys, TA (Trusted Application) contexts, and secure memory mappings. The CPE cpe:2.3:a:op-tee:optee_os:*:*:*:*:*:*:*:* confirms the affected component is the optee_os project.
RemediationAI
Upgrade to OP-TEE OS version 4.11.0, which contains the official patch for the off-by-one error in the SHA-3 ARM Crypto Extensions implementation. The vendor advisory is at https://github.com/OP-TEE/optee_os/security/advisories/GHSA-75x4-j8p9-55qv. If upgrading immediately is not possible, rebuild OP-TEE with CFG_CRYPTO_WITH_CE82=n to disable the vulnerable hardware-accelerated SHA-3 path; this trades hardware-accelerated SHA-3 performance for software-only SHA-3 (no functional loss, only throughput regression on SHA-3 workloads). There is no network-level mitigation available given the local attack vector - access control to the Linux userspace that invokes OP-TEE sessions is the only environmental compensating control.
Out-of-bounds read and write in OP-TEE OS PKCS#11 Trusted Application (versions 3.13.0-4.10.0) allows authenticated loca
Secure-world heap corruption in OP-TEE OS through 4.10.0 allows a malicious Trusted Application to write attacker-contro
Use-after-free in the OP-TEE OS Trusted Application loader (all versions through 4.10.0) allows an attacker who controls
Use-after-free race condition in OP-TEE OS versions 3.16.0 through 4.10.x enables local low-privileged attackers to corr
Integer overflow in OP-TEE OS RSA signature encoding crashes the Trusted Execution Environment on platforms with RSA har
Null pointer dereference in OP-TEE OS through version 4.10.0 allows a low-privileged Normal World process to crash the e
Subkey rollback protection in OP-TEE OS versions 3.20.0 through 4.10.x is completely non-functional due to a missing fie
Type confusion in OP-TEE OS versions 4.3.0 through 4.10.x allows a highly privileged local attacker operating in the nor
Private ECDH key recovery in OP-TEE prior to version 4.11.0 is achievable by a local attacker who can invoke TEE_DeriveK
Integer overflow in OP-TEE OS's AES-GCM implementation silently corrupts authentication tag computation when a single op
Heap exhaustion in OP-TEE OS (versions 3.3.0 through 4.10.x) allows a low-privileged normal-world local caller to progre
Stack exhaustion via unbounded recursion in the OP-TEE PKCS#11 Trusted Application allows a local low-privileged user to
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today