Airoha Chip Vulns Put Sony, Bose Earbuds & Headphones at Risk
ID: 58b1c905-b60b-5164-ad45-2c94ca596a66
STIX ID: report--58b1c905-b60b-5164-ad45-2c94ca596a66
Feed Name: Dark Reading
Threat Score
Researchers found multiple critical vulnerabilities in Airoha Bluetooth SoC products that expose a custom protocol over BLE GATT and RFCOMM, enabling unpaired attackers within Bluetooth range to read/write RAM and flash and fully take over headphones and earbuds (CVE-2025-20700/701/702). Many consumer models from several vendors are believed vulnerable; Airoha released SDK fixes but device vendors must build and distribute firmware updates and no widespread patched firmware is known yet.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.