CVE-2026-16459
Received Received - Intake

Padding Oracle Attack in Oberon PSA Crypto Library

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Switzerland Government Common Vulnerability Program

Description
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-16459
EUVD
EUVD-2026-57756

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oberon_microsystem_ag oberon_psa_crypto From 1.0.0 (inc) to 2.1.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-327 The product uses a broken or risky cryptographic algorithm or protocol.
CWE-208 Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a timing side-channel vulnerability in the RSA PKCS#1 v1.5 decryption implementation of Oberon PSA Crypto. It allows attackers to recover plaintexts by measuring timing differences during decryption operations, distinguishing between successful decryption, invalid padding, and output size issues.

Detection Guidance

Detecting this vulnerability requires analyzing the timing behavior of RSA PKCS#1 v1.5 decryption operations in Oberon PSA Crypto. Use tools like timing analysis scripts or side-channel attack frameworks to measure decryption times. Check if the library version is between 1.0.0 and 2.1.0. Commands may include running custom timing tests or using cryptographic libraries to observe decryption delays.

Impact Analysis

An attacker could exploit this to recover sensitive plaintext data from encrypted communications or stored data if your system uses the vulnerable library versions. This could lead to unauthorized access to confidential information.

Compliance Impact

This vulnerability could result in unauthorized data access, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Non-compliance may lead to legal penalties or reputational damage.

Mitigation Strategies

Immediately update Oberon PSA Crypto to version 2.1.1 or later. If updating is not possible, implement application-specific integrity checks in constant time to mitigate timing side-channel attacks. Review cryptographic operations using the vulnerable library and apply patches as soon as available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16459. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart