In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.airoha.com/product-security-bulletin/2025 |
Configurations
No configuration.
History
04 Aug 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
04 Aug 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-04 07:15
Updated : 2025-08-04 21:15
NVD link : CVE-2025-20701
Mitre link : CVE-2025-20701
JSON object : View
Products Affected
No product.
CWE
No CWE.