sony-vp-extract

Sony WH-1000XM4 Voice Pack Extractor Decrypt and extract the voice guidance MP3 prompts from Sony WH-1000XM4 encrypted firmware files. The AES-128-CBC key was extracted by dumping the he...

buds-audit

buds-audit Version 1.0.0 Bluetooth-Sicherheitsbewertungstool für drahtlose Ohrhörer, die von der Airoha-SDK-Schwachstellenkette CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702 betroffen sind. Es scannt nach Geräten in der Nähe, erstellt Fingerabdrücke von bekannten betroffenen Airoha-basierten...

EUVD-2025-23489

Malicious code in bioql PyPI...

EUVD-2025-23487

Malicious code in bioql PyPI...

CVE-2025-20702

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20702

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20700

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20702

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20702

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-20702

CVE-2025-20702 affects the Airoha Bluetooth audio SDK, enabling unauthorized access to the RACE protocol with remote privilege escalation, no user interaction required, and proximity-based exploitation. Affected details and root cause are described across multiple sources (Red Hat, NVD, NIST CVE ...

CVE-2025-20700

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20700

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-20700

CVE-2025-20700 affects the Airoha Bluetooth audio SDK. The issue is a permission bypass that allows access to critical RACE protocol data via the Bluetooth LE GATT service, enabling remote escalation of privilege with no extra execution privileges and without user interaction. PT-2025-27362 confi...

Airoha Bluetooth audio SDK 安全漏洞

Airoha Bluetooth audio SDK is a software development kit from Airoha. Airoha Bluetooth audio SDK suffers from a security vulnerability that originates from unauthorized access to the RACE protocol and could result in remote elevation of privilege...