Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2025-20700

CVSS 3.1
8.8 high
EPSS
8%p94
Published
·
Modified
Analyze CVE-2025-20700 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Weakness
CWE-306
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (8.1%)

In the news

1 story