trustedfirmware op-tee

Name: trustedfirmware op-tee
Brand: trustedfirmware

productUS

cpe:2.3:o:trustedfirmware:op-tee:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

7critical5high5medium3low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-1010298US	critical9.8	3.88% (90th)	Exploit	no fix	2019-07-15	≤ 3.3.0
CVE-2022-46152US	high8.8	0.49% (42nd)	Exploit	3.19.0	2022-11-29	< 3.19.0
CVE-2026-33317US	—	0.18% (8th)	Exploit	no fix	2026-04-24	3.13.0 → 4.10.0
CVE-2019-1010296US	critical9.8	2.80% (86th)	—	no fix	2019-07-15	≤ 3.3.0
CVE-2019-1010297US	critical9.8	2.74% (86th)	—	no fix	2019-07-15	≤ 3.3.0
CVE-2019-1010295US	critical9.8	1.63% (76th)	—	no fix	2019-07-15	≤ 3.3.0
CVE-2019-1010292US	critical9.8	1.55% (75th)	—	3.4.0	2019-07-16	< 3.4.0
CVE-2019-1010293US	critical9.8	1.55% (75th)	—	no fix	2019-07-15	≤ 3.3.0
CVE-2019-1010294US	high7.5	1.42% (73rd)	—	no fix	2019-07-15	≤ 3.3.0
CVE-2019-25052US	critical9.1OT elevated	0.87% (59th)	—	3.7.0	2021-08-11	< 3.7.0
CVE-2016-6129US	high7.5	0.78% (56th)	—	2.2.0	2017-02-13	< 2.2.0
CVE-2018-12437US	medium4.9	0.54% (45th)	—	no fix	2018-06-15	≤ 3.5.0
CVE-2022-47549US	medium6.4	0.42% (36th)	—	3.20	2022-12-19	< 3.20
CVE-2026-33662US	—	0.40% (34th)	—	no fix	2026-04-24	3.8.0 → 4.10.0
CVE-2023-41325US	medium6.7	0.39% (33rd)	—	3.22.0	2023-09-15	2 versions
CVE-2021-44149US	high7.8	0.35% (29th)	—	no fix	2021-12-07	≤ 3.15.0
CVE-2020-13799US	medium6.8OT elevated	0.30% (22nd)	—	no fix	2020-11-18	≤ 3.11.0
CVE-2021-36133US	high7.1	0.27% (19th)	—	no fix	2021-12-07	—
CVE-2026-53763US	—	0.19% (9th)	—	no fix	2026-07-06	3.0.0 → 4.10.0
CVE-2026-40290US	—	0.19% (8th)	—	no fix	2026-06-03	3.16.0 → 4.10.0
CVE-2026-44362US	—	0.18% (7th)	—	no fix	2026-07-06	3.20.0 → 4.10.0
CVE-2026-45702US	medium5.5	0.15% (5th)	—	no fix	2026-06-03	4.3.0 → 4.10.0
CVE-2026-40257US	—	0.15% (4th)	—	no fix	2026-07-06	3.21.0 → 4.10.0
CVE-2026-42546US	—	0.15% (4th)	—	no fix	2026-07-06	3.3.0 → 4.10.0
CVE-2026-41434US	—	0.15% (4th)	—	no fix	2026-07-06	3.10.0 → 4.10.0
CVE-2026-41516US	low3.3	0.14% (3rd)	—	no fix	2026-07-06	4.5.0 → 4.10.0
CVE-2026-41515US	low3.3	0.13% (3rd)	—	no fix	2026-07-06	3.9.0 → 4.10.0
CVE-2026-41514US	low3.3	0.13% (3rd)	—	no fix	2026-07-06	4.5.0 → 4.10.0
CVE-2026-45614US	—	0.10% (1st)	—	no fix	2026-06-03	≤ 4.10.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write8 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-208Observable Timing Discrepancy3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-129Improper Validation of Array Index1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan