Airoha Bluetooth Audio SDK Permission Bypass Vulnerability Allowing Unauthorized Access to Critical RACE Protocol Data

A permission bypass vulnerability has been identified in the Airoha Bluetooth audio SDK, specifically in versions through 5.5.0, as well as in the Airoha AB1561x/AB1562x/AB1563x SDK versions through 3.3.1. This vulnerability allows unauthorized access to critical data of the RACE protocol via Bluetooth Low Energy (LE) Generic Attribute Profile (GATT) service. The issue could lead to remote escalation of privileges without requiring additional execution rights or user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical RACE protocol data, allowing for remote escalation of privileges on the affected device.