Skip to content
OpenAdvisories

Weakness (CWE)

CWE-780: Use of RSA Algorithm without OAEP

Variant Incomplete

The product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP).

Source: MITRE CWE-780

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2025-9071

    Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto

    Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable …

    Oberon microsystems Oberon PSA Crypto