Loading vulnerability…
Unauthorized Bluetooth BR/EDR Pairing in Airoha Bluetooth Audio SDK
CVE-2025-20701 is a missing-authentication vulnerability in Airoha Bluetooth Audio SDK Bluetooth Classic/BR/EDR handling. Affected Bluetooth audio devices can accept pairing requests from an unauthorized nearby device without owner consent. On affected implementations, the rogue device can become trusted and reconnect automatically. Skullcandy Dime 3 (S2DCW) firmware 1.0.0.28 and Beats Studio Buds while unpaired and actively seeking pairing requests are documented affected products.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
A nearby attacker can establish an unauthorized trusted Bluetooth relationship. Reported consequences include interrupting or hijacking audio playback, denying the owner access to an active audio session, and accessing headset or hands-free functionality to potentially capture live microphone audio. Apple documented that an attacker within Bluetooth range may listen through the microphone of an unpaired Beats Studio Buds device that is actively seeking pairing requests.
If you can’t patch tonight, do this now.
Until a vendor firmware fix is installed, reduce exposure by disabling Bluetooth when it is not needed and avoiding use of affected audio devices in untrusted nearby environments. Monitor for unexpected pairing notifications or audio-session interruptions. Physical proximity limits exposure, but is not a substitute for applying an available firmware update.
Patch, then assume compromise.
Apply vendor-provided firmware or SDK fixes. Airoha released SDK updates for affected implementations. Skullcandy Dime 3 firmware 1.0.0.30 reportedly addresses the issue, although existing Dime 3 units running 1.0.0.28 reportedly lack a consumer-accessible update mechanism. Apple remediated Beats Studio Buds with Beats Firmware Update 1B211.
No validated public exploits yet. Hidden: 2 rejected by Mallory's analysis as not a working exploit.
53 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.