PT-2025-27363 · Airoha Technology · Ab156X

Dennis Heinze

+2

·

Published

2025-06-29

·

Updated

2025-09-22

·

CVE-2025-20701

CVSS v3.1
8.8
VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK (affected versions not specified)
Description The Airoha Bluetooth audio SDK contains a flaw that allows pairing of a Bluetooth audio device without user consent. This can result in remote escalation of privilege without requiring additional execution privileges. Exploitation does not require user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Weakness Enumeration

Related Identifiers

CVE-2025-20701

Affected Products

Ab156X