CVE-2026-16458
2026-08-13
09h17 +00:00
09h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Observable Timing Discrepancy Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not. |
||
| Use of a Broken or Risky Cryptographic Algorithm The product uses a broken or risky cryptographic algorithm or protocol. |
