Apple Patches Beats Studio Buds Flaw Allowing Nearby Attackers to Spy via Microphone
Apple has released a firmware update for Beats Studio Buds wireless earbuds to address a high-severity vulnerability, CVE-2025-20701 (CVSS 8.8), that could…
Tag: Airoha
CVE-2025-20701: Incorrect Authorization in Airoha Bluetooth Audio SDK
A high-severity vulnerability in the Airoha Bluetooth audio SDK allows unauthorized Bluetooth pairing without user consent, enabling nearby attackers to eavesdrop via…
CVE-2025-20700: Airoha SoC Bluetooth Vulnerability
One of three flaws in Airoha SoCs disclosed at TROOPERS, allowing attackers to take over headphones via Bluetooth without authentication.
CVE-2025-20702: Airoha SoC Bluetooth Vulnerability
Another flaw in Airoha SoCs enabling Bluetooth takeover without authentication, part of the same disclosure as CVE-2025-20700 and CVE-2025-20701.
Airoha Bluetooth Audio SDK
Software development kit for Bluetooth audio devices containing the incorrect authorization flaw leading to CVE-2025-20701.
Airoha System-on-Chips
Bluetooth SoCs vulnerable to multiple flaws including CVE-2025-20700, CVE-2025-20701, and CVE-2025-20702.