CVE-2025-7071

MediumCVSS 5.9

Published: 29/08/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

Oberon microsystem AG's ocrypto library versions 3.1.0 through before 3.9.2 are vulnerable to a padding oracle attack. An attacker can recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.

Risk Assessment

This could lead to disclosure of confidential data encrypted with this library, posing a serious threat to information security.

Recommendation

Update the ocrypto library to version 3.9.2 or later to eliminate the vulnerability.

Other vulnerabilities in ocrypto

CVE-2026-16458Medium
Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

Original NVD description (English source)

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS