What’s Vulnerable › Vulnerabilities

CVE-2025-20702

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-04 · updated 2026-06-17
• Weakness: CWE-306

Description

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

• Airoha Technology Corp. AB156x, AB157x, AB158x, AB159x series, AB1627: through Airoha IoT SDK for BT audio v5.5.0; through Airoha AB1561x/AB1562x/AB1563x SDK v3.3.1

References

• https://www.airoha.com/product-security-bulletin/2025

Get alerted when CVE-2025-20702 or the next vulnerability affects your stack