CVE-2026-41514 Details
Description
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the Hisilicon HPRE crypto driver uses non-constant-time `memcmp()` for label hash verification and has multiple distinguishable error paths. This creates a Manger-style padding oracle that allows an attacker to recover RSA-OAEP plaintext with approximately 1000-2000 adaptive chosen ciphertext queries. Only affects plat-d06 with `CFG_HISILICON_ACC_V3=y`, which seems to be disabled by default. Version 4.11.0 contains a patch. As a workaround, disable Hisilicon HPRE RSA driver with `CFG_HISILICON_ACC_V3=n`.
A padding oracle vulnerability has been identified in the OP-TEE Trusted Execution Environment, specifically within the Hisilicon HPRE crypto driver, in versions 4.5.0 prior to 4.11.0. The vulnerability arises because the RSA-OAEP decryption process uses a non-constant-time memory comparison for label hash verification, coupled with multiple distinguishable error paths. This creates a Manger-style padding oracle, enabling an attacker to recover RSA-OAEP plaintext by making approximately 1000 to 2000 adaptive chosen ciphertext queries. The issue is present only on the plat-d06 platform with the Hisilicon HPRE RSA driver enabled, which appears to be off by default.
Users can disable the Hisilicon HPRE RSA driver by setting 'CFG_HISILICON_ACC_V3=n'.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 7, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/OP-TEE/optee_os/security/advisories/GHSA-qw4r-9wj9-q23r | [email protected] | Vendor AdvisoryMitigationPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-208 | Observable Timing Discrepancy | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| trustedfirmware op-tee | >= 4.5.0, <= 4.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 7, 2026 | Initial Analysis | [email protected] |
| Jul 7, 2026 | CVE Modified | CISA-ADP |
| Jul 6, 2026 | New CVE Received | [email protected] |