CVE-2025-20702

CVE Enrichment

CVSS: 8.8 HIGH
EPSS: 10.74%
EPSS Percentile: 95.82%
CISA KEV: Not listed

Description

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 04-Aug-2025 14:15
Last Modified: 17-Jun-2026 15:41
EPSS Date: 2026-10-30
CWE: CWE-306

CVSS Vector


            CVSS:3.1                            AV:A /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

References

[email protected]

Last enrichment sync: 31-Oct-2026 01:13
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

The issue affects the Airoha SoC and was disclosed by ERNW researchers Dennis Heinze and Frieder Steinmetz, with related vulnerabilities CVE-2025-20700 and CVE-2025-20702 also enabling deeper device compromise. Apple Patches Bluetooth Eavesdropping Flaw in Beats Studio Buds

CVE (2)

People (2)

MITRE ATT&CK (1)

Vendors (2)

Products (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.