CVE-2025-207018.8HighCWE-863
Airoha Technology Corp. AB156x, AB157x, AB158x, AB159x series vulnerability
Airoha Technology Corp. · AB156x, AB157x, AB158x, AB159x series
Not in CISA KEV
8.3%probability of exploitation in the next 30 days
94th percentile
050100
Higher than 94% of scored CVEs
8.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: Ars Technica, 18 Jun.
Quiet for 19 weekslast report 19 Jun2 articles2 outlets
- Thu 18 Jun, 20:10 UTC. Ars Technica, first report. Apple patches Beats Buds eavesdropping bug CVE-2025-20701.
- Fri 19 Jun, 12:21 UTC. Malwarebytes, its first report on the story. Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 18 Jun 20:10 | Ars Technica | Apple patches Beats Buds eavesdropping bug CVE-2025-20701 |
| 19 Jun 12:21 | Malwarebytes | Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds |
- Apple patches Beats Buds eavesdropping bug CVE-2025-20701Ars Technica · first in our coverage
New articles also arrive in the RSS feed.