CVE-2026-41434 PUBLISHED

OP-TEE has unbounded recursion in sanitize_client_object()

Assigner: GitHub_M
Reserved: 20.04.2026 Published: 06.07.2026 Updated: 07.07.2026

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS#11 TA. Version 4.11.0 contains a patch. No known workarounds are available.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 3.3

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	OP-TEE
Product	optee_os
Versions	Version >= 3.10.0, < 4.11.0 is affected

References

https://github.com/OP-TEE/optee_os/security/advisories/GHSA-wh38-23ff-grff

Problem Types

CWE-121: Stack-based Buffer Overflow CWE