In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
| Link | Resource |
|---|---|
| https://www.airoha.com/product-security-bulletin/2025 |
Configurations
No configuration.
History
15 Apr 2026, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) En Airoha Bluetooth audio SDK, existe una forma de emparejar un dispositivo de audio Bluetooth sin el consentimiento del usuario. Esto podría conllevar una escalada remota de privilegios sin necesidad de permisos de ejecución adicionales. No se requiere la interacción del usuario para la explotación. |
04 Aug 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
04 Aug 2025, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
04 Aug 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-04 07:15
Updated : 2026-04-15 00:35
NVD link : CVE-2025-20701
Mitre link : CVE-2025-20701
CVE.ORG link : CVE-2025-20701
JSON object : View
Products Affected
No product.
CWE
CWE-863
Incorrect Authorization