{"id":59328,"date":"2025-07-12T12:45:52","date_gmt":"2025-07-12T12:45:52","guid":{"rendered":""},"modified":"2025-10-04T00:13:53","modified_gmt":"2025-10-04T06:13:53","slug":"cve-2025-46733-critical-vulnerability-in-op-tee-resulting-in-potential-system-compromise-and-data-leakage","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-46733-critical-vulnerability-in-op-tee-resulting-in-potential-system-compromise-and-data-leakage\/","title":{"rendered":"CVE-2025-46733: Critical Vulnerability in OP-TEE Resulting in Potential System Compromise and Data Leakage<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

CVE-2025-46733 is a critical cybersecurity vulnerability that affects the OP-TEE Trusted Execution Environment (TEE), a companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. This vulnerability is particularly impactful as it could lead to system compromise or data leakage. It is crucial for organizations, cybersecurity professionals, and individuals utilizing this technology to understand the nature of this vulnerability<\/a>, its potential impact, and the necessary steps for mitigation.
\nThis vulnerability can be exploited by an attacker with access<\/a> to the REE userspace, enabling them to trigger a panic in a TA, potentially leading to the disruption of system operations or the unauthorized access to sensitive data. Given the widespread use of OP-TEE, this vulnerability could potentially affect a broad range of systems<\/a> and devices, emphasizing the need for immediate action to mitigate the threat.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-46733
\nSeverity: Critical – CVSS score 7.9
\nAttack Vector: Local
\nPrivileges Required: High
\nUser Interaction: None
\nImpact: System compromise<\/a>, potential data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n