CVE-2025-9071 describes a cryptographic vulnerability in Oberon microsystems AG’s Oberon PSA Crypto library, affecting all versions up to 1.5.1. The flaw stems from the erroneous use of an all-zero seed for RSA-OEAP padding, leading to deterministic RSA encryption. This issue results in a low severity rating due to its high attack complexity, but it can compromise confidentiality for guessable messages and allow recognition of repeated messages. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Oberon Microsystems AG | Oberon PSA Crypto | >= 1.0.0, <= 1.5.1CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:X/R:X/V:X/RE:L/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.