CVE-2025-20700

Published Aug 4, 2025

Last updated 6 months ago

Airoha Bluetooth

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-20700 refers to a security vulnerability found in Airoha Bluetooth chips, which are used in numerous audio devices like headphones and earbuds from brands such as Sony, JBL, and Bose. The vulnerability stems from missing authentication for GATT Services. An attacker within Bluetooth range can exploit this vulnerability to gain unauthorized access to the device. Successful exploitation of CVE-2025-20700 can allow attackers to manipulate the device, potentially reading and writing RAM and flash memory. This can lead to hijacking trust relationships with paired smartphones, eavesdropping on conversations by activating the device's microphone, initiating or intercepting phone calls, and extracting phone numbers and contact lists from connected phones.

Description: In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: security@mediatek.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

security@mediatek.com: CWE-306

Hype score: Not currently trending

References