Use-After-Free Vulnerability in OP-TEE OS Trusted Application Loader
CVE-2026-71968

8.4HIGH

Key Information:

Vendor

Op-tee

Status
Optee Os
Vendor
CVE Published:
10 August 2026

What is CVE-2026-71968?

The OP-TEE OS contains a use-after-free vulnerability in its Trusted Application loader. This flaw can be exploited by attackers who possess the capability to load a signed Trusted Application and modify the TA_FLAG_CONCURRENT flag within a user TA signed header. This manipulation permits multiple concurrent sessions to operate on an identical shared context without proper locking mechanisms. The resultant conditions can lead to memory corruption in the secure-world kernel, particularly affecting the uctx->vm_info.regions list during the memory reference parameter mapping process. The underlying issue results from freeing memory regions that are still in use, creating significant security risks.

Affected Version(s)

optee_os 0 <= 4.10.0

optee_os 0 <= 4.10.0

optee_os 8794043c4065c26a2b8b1313794ba5ba5f06d296

References

https://github.com/OP-TEE/optee_os/pull/7900
issue-tracking
https://github.com/OP-TEE/optee_os/commit/8794043c4065c26...
patch
https://www.vulncheck.com/advisories/op-tee-os-use-after-...
third-party-advisory

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Argus Systems - ByteRay Ltd.
.