PT-2026-55974 · Hisilicon+1 · Hpre Crypto Driver+1
CVE-2026-41516
·
Published
2026-07-06
·
Updated
2026-07-07
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OP-TEE versions 4.5.0 through 4.10.x
Description
The RSA PKCS#1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver uses a non-constant-time
memcmp() function for label hash verification and contains multiple distinguishable error paths. This creates a Bleichenbacher-style padding oracle, which is a side-channel attack that allows an attacker to recover RSA PKCS#1 v1.5 plaintext by observing the differences in how the system responds to different padding errors.Recommendations
Update to version 4.11.0.
Disable the Hisilicon HPRE RSA driver by setting
CFG HISILICON ACC V3=n.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hpre Crypto Driver
Op-Tee