Airoha Bluetooth Audio SDK RACE Protocol Unauthorized Access Vulnerability Allowing Privilege Escalation

A vulnerability in the Airoha Bluetooth audio SDK allows unauthorized access to the RACE protocol, potentially leading to remote privilege escalation without requiring additional execution privileges. Exploitation does not need user interaction. This issue affects several chipsets, including the AB156x, AB157x, AB158x, AB159x series, and AB1627, as well as specific software versions of the Airoha IoT SDK for Bluetooth audio, and the Airoha AB1561x/AB1562x/AB1563x SDK.

Impact

Exploitation of this vulnerability could result in unauthorized access to critical capabilities of the RACE protocol, allowing for remote escalation of privileges on the affected device.