CVE-2026-71967
Medium
Description
OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal World clients to cause a denial of service when CFG_WIDEVINE_PTA is enabled. Attackers can open a session directly on the Widevine PTA to trigger an unconditional dereference of a NULL calling session pointer via is_user_ta_ctx(), faulting the TEE at S-EL1 and crashing the trusted execution environment.
SeverityMedium
CVSS5.5
Exploit probability—
ProductOp-tee Optee Os
PublishedAug 10, 2026
First seenAug 10, 2026
Weakness typeCWE-476NULL pointer dereference
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OP-TEE optee_os | v ≤ 4.10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.