- Mar 9, 2019
- 863
Read more here:Multiple vulnerabilities in Airoha Bluetooth chips could be exploited to take over headphone and earbud products from multiple vendors, IT security firm ERNW warns.
Airoha provides Bluetooth system on a chip (SoC) products and reference designs and implementations for them, and has become one of the largest suppliers for headphone and earbud vendors, including Beyerdynamic, Marshall, and Sony.
According to ERNW, products built using Airoha’s SoCs, as well as reference implementations that rely on its software development kit (SDK) expose a custom protocol that allows attackers to read and write the RAM and flash storage, and manipulate the device.

Airoha Chip Vulnerabilities Expose Headphones to Takeover
Vulnerabilities in Airoha Bluetooth SoCs expose headphone and earbud products from multiple vendors to takeover attacks.