CVE-2026-44362 | OP-TEE up to 4.10.x Subkey Rollback Protection core/crypto/signed_hdr.c shdr_load_pub_key Version downgrade

SecurityVulns
Yanac

A vulnerability, which was classified as very critical, has been found in OP-TEE up to 4.10.x. The affected element is the function shdr_load_pub_key of the file core/crypto/signed_hdr.c of the component Subkey Rollback Protection. Performing a manipulation of the argument Version results in algorithm downgrade.

This vulnerability was named CVE-2026-44362. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More