Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-16459 EUVD-2026-57756GHSA-f34q-f47h-v25c

Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by NCSC.ch

Description

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

Affected products

VendorProductAffectedFixed
Oberon microsystems Oberon PSA Crypto 1.0.0 – < 2.1.1 2.1.1

References