Skip to content
OpenAdvisories

Product · Oberon microsystems

ocrypto

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-16458

    Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto

    Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

    Oberon microsystems ocrypto
  • Medium 5.9
    CVE-2025-7071

    Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library

    Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.

    Oberon microsystems ocrypto