CVE-2025-20702

Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK (affected versions not specified)

Description In the Airoha Bluetooth audio SDK, unauthorized access to the RACE protocol is possible. This could lead to remote escalation of privilege without requiring additional execution privileges, and does not require user interaction for exploitation. Reports indicate that devices utilizing Airoha chips may be affected, potentially allowing unauthorized access and eavesdropping.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.