CVE-2025-7383CWE-208CWE-327

CVE-2025-7383

published August 29, 2025

CVSS
5.9
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.

The record
Technical detail
CVSS
5.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00089 · 0.4th percentile
Weaknesses
CWE-208 · Observable Timing Discrepancy; CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-08-29T14:15Z
References (1)
https://www.oberon.ch/security-advisories/cve-2025-7383/ · [email protected]
EPSS history
Timeline
  • 29 AUG 09:19Z
    Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library
    cvelistv5