CVE-2026-71967: Op-Tee Optee OS

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal World clients to cause a denial of service when CFG_WIDEVINE_PTA is enabled. Attackers can open a session directly on the Widevine PTA to trigger an unconditional dereference of a NULL calling session pointer via is_user_ta_ctx(), faulting the TEE at S-EL1 and crashing the trusted execution environment.

Affected products

• Op-Tee Optee OS: up to and including 4.10.0

Published 2026-08-10. Last modified 2026-09-16.