Back to Database
Status published
Unknown
CVE-2025-20701
In the Airoha Bluetooth audio SDK, there is a possible...
Vulnerability Description
In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20701
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
Airoha Technology Corp.
View all reports →Affected Software
AB156x, AB157x, AB158x, AB159x series
Vulnerable Versions:
Airoha IoT SDK for BT audio v5.5.0 and earlier, Airoha AB1561x/AB1562x/AB1563x SDK v3.3.1 and earlier
Timeline
Official Publish:
August 4th, 2025
Last Modified:
June 21st, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available