CVE-2025-9071 LOW

CVE-2025-9071: Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto

Vendor Oberon Microsystems Ag
Product Oberon PSA Crypto
Weakness CWE-780
Published August 29, 2025
Last update August 29, 2025

CVSS base score

2.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/RE:L

What the vulnerability does

01Description

Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs.

Key dates

02Disclosure timeline

August 29, 2025 CVE published
August 29, 2025 Record updated