CVE-2025-20701

Published Aug 4, 2025

Last updated 4 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-20701 is an authorization bypass vulnerability found within the Airoha Bluetooth audio SDK. This flaw enables an attacker to pair Bluetooth audio devices without requiring user consent or interaction. The vulnerability can lead to remote privilege escalation, as it does not necessitate any additional execution privileges for exploitation. The vulnerability affects devices that utilize the Airoha Bluetooth audio stack, including specific Airoha AB156x, AB157x, AB158x, and AB159x series devices running certain versions of the Airoha IoT SDK for BT audio, as well as Airoha AB1561x/AB1562x/AB1563x SDK. This includes various Bluetooth audio peripherals such as Beats Studio Buds and other popular headphone models from manufacturers like Sony, Bose, JBL, Marshall, and Jabra. Exploitation requires the attacker to be within Bluetooth radio range of the target device.

Description: In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: security@mediatek.com
NVD status: Deferred

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

security@mediatek.com: CWE-863

Hype score: Not currently trending

References