Jenswikl

**Name of the Vulnerable Software and Affected Versions** OP-TEE versions 3.10.0 through 4.10.x **Description** OP-TEE is a Trusted Execution Environment (TEE) designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. An unbounded recursion can cause the PKCS#11 TA (Trusted Application) to crash. **Recommendations** Update to version 4.11.0.

**Name of the Vulnerable Software and Affected Versions** OP-TEE versions 3.9.0 through 4.10.x **Description** The RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses a non-constant-time `memcmp()` function for label hash verification and contains multiple distinguishable error paths. This creates a Manger-style padding oracle, which is a side-channel attack that allows an attacker to recover RSA-OAEP plaintext by sending approximately 1000-2000 adaptive chosen ciphertext queries. **Recommendations** Update to version 4.11.0. Disable the NXP CAAM RSA driver by setting `CFG CRYPTO DRV RSA=n`.

**Name of the Vulnerable Software and Affected Versions** OP-TEE versions 3.3.0 through 4.10.x **Description** A resource leak exists in the shared memory cleanup logic of OP-TEE, a Trusted Execution Environment designed for Arm Cortex-A cores using TrustZone technology. The function `cleanup shm refs()` in `core/tee/entry std.c` fails to apply the `OPTEE MSG ATTR TYPE MASK` bitmask to parameter attributes. When a normal-world caller provides non-contiguous memory parameters, the system fails to match the attribute type in its internal switch statement and skips the `mobj put()` call. This leads to a persistent reference leak of `mobj reg shm` objects. This issue specifically affects non-FF-A configurations supporting non-contiguous, non-secure shared memory. The resulting accumulation of leaks consumes the secure-world heap, which degrades the system's ability to handle trusted application operations and eventually necessitates a reboot. **Recommendations** Update to version 4.11.0.

**Name of the Vulnerable Software and Affected Versions** OP-TEE versions 3.0.0 through 4.10.x **Description** OP-TEE is a Trusted Execution Environment (TEE) designed as a companion to a non-secure Linux kernel running on Arm Cortex-A cores using TrustZone technology. A 32-bit integer overflow exists in the AES-GCM implementation of the OP-TEE core. This issue occurs when processing more than 512 megabytes of payload or Additional Authenticated Data (AAD), causing the authentication tag to be computed with incorrect bit-length values and breaking the authentication guarantee. **Recommendations** Update to version 4.11.0.