CVE ID | Description | Severity | Affected Versions | Fixed In Version |
CVE-2025-9071 | Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto | Low | 1.0.0 to 1.5.1 (unpatched) | 1.5.1 with rsa_oaep_padding.patch |
CVE-2025-7383 | Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto | Medium | 1.0.0 to 1.5.0 | 1.5.1 |
CVE-2025-7071 | Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto | Medium | 3.1.0 to 3.9.1 | 3.9.2 |