Padding Oracle Attack Vulnerability in Oberon PSA Crypto Library from Oberon Microsystems

CVE-2025-7383

What is CVE-2025-7383?

The Oberon PSA Crypto library, developed by Oberon Microsystems, is vulnerable to a padding oracle attack across all versions from 1.0.0 to prior to 1.5.1. This vulnerability allows attackers to leverage timing measurements during AES-CBC PKCS#7 decrypt operations, potentially enabling them to recover sensitive plaintext data. The issue emphasizes the need for robust security practices and timely updates to safeguard against data breaches stemming from cryptographic vulnerabilities.

References