Airoha Chip Vulnerabilities Expose Headphones to Takeover

Brownie2019

Level 23
Thread author
Verified
Well-known
Forum Veteran
Mar 9, 2019
906
4,281
2,168
Germany
Multiple vulnerabilities in Airoha Bluetooth chips could be exploited to take over headphone and earbud products from multiple vendors, IT security firm ERNW warns.

Airoha provides Bluetooth system on a chip (SoC) products and reference designs and implementations for them, and has become one of the largest suppliers for headphone and earbud vendors, including Beyerdynamic, Marshall, and Sony.

According to ERNW, products built using Airoha’s SoCs, as well as reference implementations that rely on its software development kit (SDK) expose a custom protocol that allows attackers to read and write the RAM and flash storage, and manipulate the device.
Read more here: