With low probability it's possible to recover few bits of plaintext.
vulners.com/securityvulns/securityvulns:doc:20909