CVE-2025-9071
Low
Description
Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs.
SeverityLow
CVSS2.3
Exploit probability7. percentile0.2%
ProductOberon PSA Crypto
PublishedAug 29, 2025
First seenAug 29, 2025
Weakness typeCWE-780CWE-780
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Oberon microsystems AG Oberon PSA Crypto | 1.0.0 ≤ v ≤ 1.5.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.