Airoha Technology vulnerabilities
We track 3 vulnerabilities in Airoha Technology products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 4, 2025.
Latest Airoha Technology vulnerabilities
- 8.8 High severity
AB156x, AB157x, AB158x, AB159x series, AB1627: Missing Authentication for Critical Functionality
In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 8.8 High severity
AB156x, AB157x, AB158x, AB159x series: Incorrect Authorization
In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 8.8 High severity
AB156x, AB157x, AB158x, AB159x series, AB1627: Missing Authentication for Critical Functionality
In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User