High severity7.5OSV Advisory· Published Jan 2, 2018· Updated Jun 17, 2026

CVE-2017-1000412

Description

Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Op Tee/Optee OSOSV2 versions
0.1.0, 0.2.0, 0.3.0, …+ 1 more
- (no CPE)range: 0.1.0, 0.2.0, 0.3.0, …
- (no CPE)range: <=2.4.0
Linaro/Op Teellm-fuzzy
Range: <=2.4.0

Patches

Vulnerability mechanics

References

github.com/OP-TEE/optee_os/blob/2.5.0/CHANGELOG.mdnvdThird Party Advisory
github.com/OP-TEE/optee_os/pull/1610nvdThird Party Advisory
www.op-tee.org/security-advisories/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000