Back to Database
Status published
Unknown
CVE-2025-20700
In the Airoha Bluetooth audio SDK, there is a possible...
Vulnerability Description
In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20700
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
Airoha Technology Corp.
View all reports →Affected Software
AB156x, AB157x, AB158x, AB159x series, AB1627
Vulnerable Versions:
Airoha IoT SDK for BT audio v5.5.0 and earlier, Airoha AB1561x/AB1562x/AB1563x SDK v3.3.1 and earlier
Timeline
Official Publish:
August 4th, 2025
Last Modified:
February 26th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available