Known Vulnerabilities for products from Trustedfirmware
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Trustedfirmware".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45702 json | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A c... | Not Provided | 2026-06-03 | 2026-06-05 |
| CVE-2026-45614 json | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A c... | Not Provided | 2026-06-03 | 2026-06-05 |
| CVE-2026-40290 json | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A c... | Not Provided | 2026-06-03 | 2026-06-05 |
| CVE-2026-34877 json | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized S... | Not Provided | 2026-04-02 | 2026-06-05 |
| CVE-2026-34876 json | An issue was discovered in Mbed TLS 3.x before 3.6.6. An out-of-bounds read vulnerability in mbedtls_ccm_finish() in library/... | Not Provided | 2026-04-02 | 2026-06-05 |
| CVE-2026-34875 json | An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export f... | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2026-34874 json | An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished... | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2026-34873 json | An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session. | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2026-34871 json | An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable ... | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2026-33662 json | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A c... | Not Provided | 2026-04-24 | 2026-06-05 |
| CVE-2026-33317 json | OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A c... | Not Provided | 2026-04-24 | 2026-06-05 |
| CVE-2026-25835 json | Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG). | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2026-25834 json | Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2026-25833 json | Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() function | Not Provided | 2026-04-01 | 2026-06-05 |
| CVE-2025-49601 json | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes before ... | Not Provided | 2025-07-04 | 2026-06-05 |
| CVE-2025-49600 json | In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal errors... | Not Provided | 2025-07-04 | 2026-06-05 |
| CVE-2025-49087 json | In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to reco... | Not Provided | 2025-07-20 | 2026-06-05 |
| CVE-2025-27810 json | Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialize... | Not Provided | 2025-03-25 | 2026-06-05 |
| CVE-2025-27809 json | Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrar... | Not Provided | 2025-03-25 | 2026-06-05 |
| CVE-2024-49195 json | Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair | Not Provided | 2024-10-15 | 2026-06-05 |