Skip to content
Bluetooth Vulnerabilities Enable Silent Attacks on Audio Devices

Bluetooth Vulnerabilities Enable Silent Attacks on Audio Devices

First seen 7 Nov 2026, 12:47 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 7, 2026 at 12:48 UTC
  • •Critical vulnerabilities in Airoha Bluetooth devices allow unauthorized access.
  • •Stealtooth attack exploits automatic pairing, enabling silent key overwriting.
  • •No confirmed active exploitation reported, but risks remain high.

Recent research has uncovered vulnerabilities in Airoha-based Bluetooth headphones and earbuds (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) that allow attackers within Bluetooth range to bypass authentication and access device memory. The flaws stem from implementation issues in the RACE protocol, enabling unauthorized access to sensitive data and device control. Additionally, a novel attack method called Stealtooth exploits automatic pairing functions in commercial Bluetooth devices, allowing attackers to silently overwrite link keys and hijack pairing processes. This attack has been demonstrated on various devices, highlighting widespread vulnerabilities across major manufacturers. The situation is exacerbated by the low barrier to entry for attackers, as only commodity hardware and open-source software are required. As of now, there are no confirmed reports of, but the potential for abuse is significant.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 3h ago How this analysis works

Timeline

2025-08-04
CVE-2025-20700, CVE-2025-20701, CVE-2025-20702 published
Airoha Bluetooth vulnerabilities disclosed, affecting various audio devices.
ERNW
2026-05-11
First public PoC for CVE-2025-20700
Proof-of-concept code for the vulnerability was released, demonstrating the exploit.
ERNW
2026-07-19
First public PoC for CVE-2025-20701
Proof-of-concept code for this vulnerability was made available, revealing exploitation methods.
ERNW
Recent
Stealtooth attack disclosed
A new attack method exploiting automatic pairing in Bluetooth devices was reported, affecting multiple manufacturers.
arXiv

More articles in this cluster (2)

Following this threat?

Track CVE-2025-20700 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

Which devices are affected by these vulnerabilities?
Airoha-based Bluetooth headphones and earbuds from various manufacturers are affected.
Is there a patch available for these vulnerabilities?
As of now, no specific patches have been reported for the Airoha vulnerabilities.
What defensive measures can be taken?
Implement user notifications for pairing processes and avoid automatic pairing where possible.