Vendors / Airoha Technology Corp. Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Airoha Technology Corp. records in CISA KEV No Airoha Technology Corp. vulnerabilities are listed in CISA KEV.
Priority MEDIUM 52
In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.09302 · Published 2025-08-04 · No fix listed CWE-306
Priority MEDIUM 50
In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.07204 · Published 2025-08-04 · No fix listed CWE-863
Priority MEDIUM 50
In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.07357 · Published 2025-08-04 · No fix listed CWE-306
Priority LOW 27
In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check.
CVSS 3.1 MEDIUM 6.3· Adjacent network · Low privileges · No interaction · EPSS 0.00225 · Published 2026-11-06 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
0 3 1 0 0
THREATIST.IORead the docs