PT-2025-27363 · Airoha · Airoha Bluetooth Audio Sdk

Dennis Heinze

+2

·

Published

2025-06-29

·

Updated

2026-01-03

·

CVE-2025-20701

CVSS v3.1
8.8
VectorAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK (affected versions not specified)
Description The Airoha Bluetooth audio SDK contains a flaw that allows Bluetooth audio devices to pair without user consent. This can result in remote escalation of privilege without requiring additional execution privileges. Exploitation does not require user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Missing Authentication

Weakness Enumeration

CWE-863CWE-306

Related Identifiers

BDU:2026-01012
CVE-2025-20701

Affected Products

Airoha Bluetooth Audio Sdk