Airoha

Reported Context (2)

The flaw, tracked as CVE-2025-20701 in the Airoha Bluetooth Audio SDK, was fixed in firmware 1.0.0.30, but existing customers currently have no consumer-accessible way to update affected units. Skullcandy Dime 3 Earbuds Allow Unauthenticated Bluetooth Pairing
The issue affects the Airoha SoC and was disclosed by ERNW researchers Dennis Heinze and Frieder Steinmetz, with related vulnerabilities CVE-2025-20700 and CVE-2025-20702 also enabling deeper device compromise. Apple Patches Bluetooth Eavesdropping Flaw in Beats Studio Buds

CVE (3)

People (3)

MITRE ATT&CK (1)

Vendors (2)

Products (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.