In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.airoha.com/product-security-bulletin/2025 |
Configurations
No configuration.
History
04 Aug 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
04 Aug 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-04 07:15
Updated : 2025-08-04 14:15
NVD link : CVE-2025-20700
Mitre link : CVE-2025-20700
JSON object : View
Products Affected
No product.
CWE
No CWE.