Critical severity9.1NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026

CVE-2019-25052

Description

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arm/Op Tee
cpe:2.3:o:trustedfirmware:op-tee:*:*:*:*:*:*:*:*
Range: <3.7.0
Linaro/OP-TEEdescription
Op Tee/Optee OSllm-fuzzy
Range: <3.7.0

Patches

Vulnerability mechanics

References

github.com/OP-TEE/optee_os/commit/34a08bec755670ea0490cb53bbc68058cafc69b6nvdPatchThird Party Advisory
github.com/OP-TEE/optee_os/security/advisories/GHSA-pgwr-qmgh-vhmfnvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000