VULNERABILITY INTELLIGENCE
CVE-2025-9071
EPSS probability0.18%
CISA KEVNot currently listed
Published2025-08-29
Last modified2026-10-18
Description
Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs.
Weakness classification
- vulnerability@ncsc.ch: CWE-780