Threat Intelligence / CVE / CVE-2025-20700

CVE-2025-20700

CVSS 8.8 (HIGH) · EPSS 6.2% · Priority 8.1/10 · Published 2025-08-04

As of 2026-02-26, CVE-2025-20700 is a CVSS 8.8 (HIGH-severity) vulnerability. EPSS exploitation probability 6.2%. Threadlinqs Intelligence tracks 1 threat exploiting it.

Last updated: 2026-02-26

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

Threats tracking this CVE

Airoha Bluetooth SoC Authentication Bypass & RACE Protocol Abuse (CVE-2025-20700/20701/20702) Enables Microphone Eavesdropping and Connection Hijacking on Beats Studio Buds and 28+ Headphone Models — HIGH

References

https://www.airoha.com/product-security-bulletin/2025

Full detection coverage & IOCs for threats exploiting CVE-2025-20700 are available via the Threadlinqs MCP server (Purple tier). View plans →

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.