CVE-2026-41434

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.10.0 and prior to version 4.11.0, an unbounded recursion can crash the PKCS#11 TA. Version 4.11.0 contains a patch. No known workarounds are available.

• CWE-121

• https://github.com/OP-TEE/optee_os/security/advisories/GHSA-wh38-23ff-grffPatch, Vendor Advisory

Published

Jul 6, 2026

Last Modified

Jul 7, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41429arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ES…8.8
• CVE-2026-4143The Neos Connector for Fakturama plugin for WordPress is vul…4.3
• CVE-2026-41430Press, a Frappe custom app that runs Frappe Cloud, manages i…6.1
• CVE-2026-41431Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browse…8
• CVE-2026-41432New API is a large language mode (LLM) gateway and artificia…8.2
• CVE-2026-41433OpenTelemetry eBPF Instrumentation provides eBPF instrumenta…8.4
• CVE-2026-41445KissFFT before commit 8a8e66e contains an integer overflow v…8.8
• CVE-2026-41446Snap One WattBox 800 and 820 series firmware versions prior …9.8
• CVE-2026-41447FirmaCheck for Windows before 1.3.16 contains a DLL hijackin…8.5
• CVE-2026-41448AdGuard Home, when started with the --glinet flag, contains …9.4
• CVE-2026-4145During an internal security assessment, a potential vulnerab…8.5
• CVE-2026-41452Krayin CRM 2.2.4 contains a missing authentication vulnerabi…9.8