CVE-2025-20701
Allows Bluetooth pairing without user consent leading to privilege escalation
The Airoha Bluetooth audio SDK for AB156x, AB157x, AB158x, and AB159x series contains a vulnerability that allows an attacker to pair Bluetooth audio devices without user consent. This can lead to remote escalation of privilege. No exploitation has been reported, and no fix is available yet.
Airoha Technology Corp. AB156x, AB157x, AB158x, AB159x series · Updated 28 Oct · From 1 of our story and the public records
Being exploitedNot reportedNo attacks reported in the records
CISA known exploitedNot listedThe US list of flaws under attack
SeverityhighCVSS 8.8 of 10
FixNot yetSee what to do below
Am I affected?
The records do not list fixed versions yet. Check the vendor's advisory below.
What to do
- No fix is available. Monitor for updates from Airoha.
The record
| CVE | What it is | Severity | CISA listed | Exploit chance, 30 days |
|---|---|---|---|---|
| CVE-2025-20701 | In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privileg… | high 8.8 | No | 8.0% |
Our reporting
27 OctApple Backports CoreGraphics Zero-Day Fix to Older iPhones and iPadsReported elsewhere
BleepingComputer · 27 OctApple backports CoreGraphics zero-day patches to older iPhones ↗The records
CVE-2025-20701 on NVD ↗Is anything you run affected?Members connect Zotpaper to their AI assistant. It checks your own project against every vulnerability on this page and the others we track, and says what to update.
How it works