CVE-2026-41516 Details
Description
OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 4.5.0 and prior to version 4.11.0, the RSA PKCS#1 v1.5 decryption implementation in the Hisilicon HPRE crypto driver uses non-constant-time `memcmp()` for label hash verification and has multiple distinguishable error paths. This creates a Bleichenbacher-style padding oracle that allows an attacker to recover RSA PKCS#1 v1.5 plaintext. Version 4.11.0 contains a patch. As a workaround, disable Hisilicon HPRE RSA driver with `CFG_HISILICON_ACC_V3=n`.
A padding oracle vulnerability has been identified in the OP-TEE Trusted Execution Environment, specifically in versions 4.5.0 prior to 4.11.0. The issue arises in the Hisilicon HPRE crypto driver, where the RSA PKCS#1 v1.5 decryption process improperly verifies label hashes using a non-constant-time comparison. This flaw, combined with multiple distinguishable error responses, creates a Bleichenbacher-style padding oracle, allowing an attacker to recover plaintext from RSA PKCS#1 v1.5 encryption. The vulnerability only affects the 'plat-d06' platform with the Hisilicon HPRE RSA driver enabled, which is not the default configuration.
Users can update to OP-TEE version 4.11.0 or later, where this vulnerability has been patched. If an immediate update is not possible, the Hisilicon HPRE RSA driver can be disabled by setting 'CFG_HISILICON_ACC_V3=n'.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/OP-TEE/optee_os/security/advisories/GHSA-wxp6-8wwr-h4gf | [email protected] | MitigationVendor AdvisoryExploitPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-208 | Observable Timing Discrepancy | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| trustedfirmware op-tee | >= 4.5.0, <= 4.10.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 7, 2026 | Initial Analysis | [email protected] |
| Jul 6, 2026 | CVE Modified | CISA-ADP |
| Jul 6, 2026 | New CVE Received | [email protected] |