CVE-2025-20701Patch

⚠️ Apple fixed a Beats Studio Buds bug (CVE-2025-20701) that could let a nearby attacker listen through the microphone when the device was not yet paired and seeking pair requests. Update to firmware 1B211. Read the full story: https://thehackernews.com/2026/06/apple-patches-beats-studio-buds-flaw.html

🎧 Beats z podsłuchem Apple załatało krytyczną lukę w Beats Studio Buds, która mogła pozwalać na podsłuch przez Bluetooth. Problem dostał oznaczenie CVE-2025-20701 i dotyczył procesu parowania słuchawek. W uproszczeniu: atakujący znajdujący się blisko urządzenia mógł wykorzystać błąd w uwierzytelnianiu i uzyskać dostęp do mikrofonu słuchawek, zanim zostały poprawnie sparowane. Nie jest to scenariusz masowy ani zdalny „z drugiego końca świata”, ale sam typ podatności jest ciekawy. Apple wypuściło poprawkę w firmware 1B211. Aktualizacja powinna instalować się automatycznie, gdy słuchawki są w etui, mają baterię i znajdują się blisko sparowanego iPhone’a, iPada albo Maca. Źródło: Cyber Security Hub

🛡️ @skullcandy Dime 3 earbuds can accept Bluetooth connections from nearby unpaired devices without owner approval. CVE-2025-20701 could enable audio hijacking and even live microphone access. A patched firmware exists. The problem? Consumers currently can’t install it. https://t.co/dIjNiQu5wa

Apple patches Beats Studio Buds vulnerability (CVE-2025-20701) that allows nearby hackers to eavesdrop. Also: new iPhone BootROM exploit discovered. https://www.redsecuretech.co.uk/blog/post/beats-studio-buds-bluetooth-flaw-allows-eavesdropping/1254 #BeatsStudioBuds #CVE #BluetoothVulnerability #Eavesdropping #Airoha #iPhone #BootROM #AppleSecurity https://t.co/pXhmiGcJZ7

1/3 🎧 CVE-2025-20701 afecta #SkullcandyDime3 con firmware 1.0.0.28. Un atacante dentro del alcance #Bluetooth puede emparejar su dispositivo sin tocar los audífonos, introducir un PIN o recibir aprobación del propietario. #IoTSecurity

ثغرة تجسس خطيرة تهدد خصوصية مستخدمي Beats Buds! هل أنت آمن؟ آبل تُجبر على سد فجوة أمنية عالية الخطورة بسماعاتها اللاسلكية 🛡 أصدرت آبل تحديثاً عاجلاً لسماعات Beats Studio Buds لمعالجة ثغرة CVE-2025-20701، المصنفة بخطورة 8.8 (CVSS)، والتي كانت تسمح لمهاجمين ضمن نطاق Bluetooth بالتنصت على المستخدمين عبر الميكروفون دون علمهم. يأتي هذا الإجراء الضروري بعد اكتشاف الثغرة من قبل باحثي ERNW GmbH، ويؤكد على المخاطر الكامنة في أجهزة الاستماع المتصلة. بالموازاة، تم الكشف عن استغلال usbliter8 الجديد لشرائح A12 وA13 من آبل، والذي يعتبر 'غير قابل للترقيع' ويستغل عيوباً في متحكم USB لفتح أبواب خلفية دائمة. 🔹 CVE-2025-20701: ثغرة في Airoha Bluetooth audio SDK تسمح بالاقتران غير المصرح به ووصول الميكروفون. ⚡ تحديث 1B211: آبل عالجت الخلل في Beats Studio Buds، داعية المستخدمين لتحديث أجهزتهم فوراً لضمان الحماية. 🔐 usbliter8: استغلال خطير يستهدف BootROM في A12/A13، يستفيد من عيوب عتادية ولا يمكن إصلاحه عبر تحديثات البرمجيات. 🧠 المخاطر المترتبة: تنوع التهديدات من التنصت السمعي إلى اختراق أساسيات أمان الجهاز، مما يطرح تحديات جسيمة. هذه التطورات تضع خصوصية المستخدمين وأمان أجهزتهم على المحك، وتبرز ضرورة اليقظة المستمرة من الشركات والمستخدمين على حد سواء. الاستغلال غير القابل للترقيع يعني أن بعض الأجهزة القديمة ستبقى عرضة للخطر بشكل دائم، مما قد يدفع نحو تغيير العتاد. هل تقع مسؤولية الأمان على الشركة المصنعة أم على المستخدم النهائي في عالم يتطور فيه التهديد باستمرار؟ شاركونا آراءكم 👇 #Glitch4Techs #Apple #IPhone 🔗 اقرأ المقال كاملاً:

برای ایرپاد مدل Skullcandy Dime 3 ، آسیب پذیری با کد شناسایی CVE-2025-20701 برای Bluetooth این نوع دیوایس ها منتشر شده است. این آسیب پذیری باعث hijack شدن session برقرار شده این مدل دیوایس با گوشی همراه کاربر می شود و هکرها می توانند صدا و وویس های کاربر را کپچر و sniff نمایند. https://t.co/lCz1LFmGD6

🚨 Skullcandy Dime 3 kulaklıklarda kritik Bluetooth açığı! Skullcandy Dime 3'ün 1.0.0.28 firmware sürümündeki güvenlik açığı, Bluetooth menzilindeki saldırganların kullanıcı onayı olmadan kulaklıkla eşleşmesine ve bağlantıyı ele geçirmesine neden olabiliyor. 🔴 CVE-2025-20701 | VU#859658 Saldırgan; 🔹 Pairing modunun açılmasına gerek olmadan eşleşebiliyor, 🔹 A2DP üzerinden ses akışını ele geçirebiliyor, 🔹 HFP/HSP üzerinden kulaklığın mikrofonuna erişerek çevredeki sesleri dinleyebiliyor. Üstelik saldırgan bir kez eşleştirildiğinde güvenilir Bluetooth cihazı haline geliyor ve tekrar menzile girdiğinde otomatik bağlanabiliyor. ⚠️ Daha da dikkat çekici olanı: Kullanıcı yalnızca New device paired uyarısını duyuyor; bağlantıyı önceden reddetme imkanı bulunmuyor. 🩹 Bu açığın 1.0.0.30 sürümünde düzeltildiği bildiriliyor. Ancak Dime 3'ün Skullcandy uygulaması üzerinden firmware güncellemesini desteklememesi nedeniyle mevcut 1.0.0.28 kullanıcıları için güncelleme konusu ayrıca problem.

Critical flaw discovered in Skullcandy Dime 3 earbuds running firmware 1.0.0.28: attackers nearby can auto-pair without consent, hijack audio via A2DP and access the mic—thanks to a weakness in the Airoha Bluetooth audio SDK (CVE-2025-20701). Patch 1.0.0.30 fixes it, but there’s no way to install via the app. Users should monitor for “new device paired”, remove unknown Bluetooth devices, and avoid using these earbuds where strangers are close. #Bluetooth #Security #Skullcandy #Vulnerability #CVE #AudioHijack #Bluetooth #Security #Skullcandy #Vulnerability #AudioHijack #CVE https://thedailytechfeed.com/major-bluetooth-flaw-in-skullcandy-dime-3-lets-attackers-hijack-audio-spy-via-mic/

CERT/CC says affected Dime 3 owners have no known consumer-accessible path from firmware 1.0.0.28 to the patched 1.0.0.30: https://www.technadu.com/skullcandy-dime-3-earbuds-vulnerable-to-silent-bluetooth-hijacking-cve-2025-20701/636417/

TRC analysis shows attackers exploiting CVE-2025-20701 to hijack Skullcandy Dime 3 earbuds without user interaction. Once paired, they capture microphone audio and maintain persistent access through automatic reconnection. The vulnerability affects millions of devices with limited update paths. #Vulnerability #IoTSecurity 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/skullcandy-dime-3-bluetooth-hijacking-cve-2025-20701

An attacker can use it to capture live microphone audio. A nearby attacker can pair with Dime 3 earbuds at firmware 1.0.0.28, hijack audio, and activate the mic-CVE-2025-20701 has a patch, but no consumer update path. CERT/CC advisory VU#859658 says Skullcandy Dime 3 earbuds running firmware 1.0.0.28 accept Bluetooth Classic pairing from any nearby unpaired device without user interaction, letting an attacker interrupt audio and... The vendor considers firmware 1.0.0.30 fixed, but Skullcandy offers no consumer-accessible way to update existing units. Any nearby attacker can push a Bluetooth Classic pairing request at Skullcandy Dime 3 earbuds running firmware 1.0.0.28 and get a completed bond without touching the case, pressing a button, or knowing a PIN. Underlying issue is CVE-2025-20701, described in the Airoha Bluetooth audio SDK as a possible way to pair a Bluetooth audio device without user consent. https://news.ojobit.com/story/skullcandy-dime-3-bluetooth-pairing-vulnerability-3ae449

Beats Studio Buds sizi dinleyebilir: Bluetooth menzilinde kimlik doğrulaması yok! ERNW güvenlik firması, Beats Studio Buds'ın Airoha SoC çipindeki Bluetooth BR/EDR açığını (CVE-2025-20701) keşfetti. Eşleştirme modundaki kulaklık, saldırgana mikrofon erişimi ve çevre ses dinleme imkânı veriyor. • Kimlik doğrulaması gerektirmiyor — Bluetooth menzininde olmak yeterli. • Arama geçmişi ve rehbere erişim, HFP üzerinden komut gönderme ve aktif aramaların dinlenmesi mümkün. • Yama: Beats Firmware 1B211 — iPhone, iPad veya Mac yakınındayken otomatik yükleniyor. Kulaklığınızın güncellendiğini doğrulayın; özellikle hassas ortamlarda Beats takıyorsanız! #SiberGüvenlik #Apple #Bluetooth

Bluetooth イヤホンが盗聴器化 — Beats Studio Buds の CVE-2025-20701 が暴いた Airoha SDK 汚染 https://hackinglabo.com/article/beats-studio-buds-airoha-cve-2025-20701?utm_source=dlvr.it&utm_medium=twitter

แอปเปิลอัปเดต Beats Studio Buds แก้ช่องโหว่ CVE-2025-20701 แอบฟังผ่านไมโครโฟน https://monsterconnect.co.th/apple-patches-beats-studio-buds-flaw

Apple corrige falha grave nos Beats Studio Buds que permitia espionagem de conversas: a vulnerabilidade CVE-2025-20701 dava a um invasor dentro do alcance do Bluetooth a capacidade de ouvir pelo microfone de um dispositivo ainda não pareado enquanto ele buscava solicitações de conexão. O problema foi corrigido com o firmware 1B211, distribuído automaticamente aos fones quando estiverem pareados e próximos de um iPhone, iPad ou Mac. As informações são do site BleepingComputer.

TRC analysis shows attackers exploited CVE-2025-20701 to pair with Beats Studio Buds without user consent, gaining unauthorized microphone access. The vulnerability in Airoha's Bluetooth SDK enabled attackers within range to escalate privileges and potentially pivot to connected devices. #BluetoothSecurity #ZeroTrust 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/apple-patches-beats-studio-buds-flaw-cve-2025-20701

📢Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8.8), refers to a case of incorrect authorization impacting the Airoha Bluetooth audio SDK that makes it possible to pair a Bluetooth audio device without user consent. Successful exploitation of the flaw could lead to remote escalation of privilege without requiring any additional execution privileges or user interaction. #CyberSecurity #Apple #CVE #Vulnerability

Apple's latest firmware update for Beats Studio Buds addresses a critical Bluetooth vulnerability (CVE-2025-20701) that allowed nearby attackers to eavesdrop via the device's microphone. Users should update to Firmware 1B211 to secure their devices. #Apple #BeatsStudioBuds #Security #Bluetooth #FirmwareUpdate #CVE202520701 https://thedailytechfeed.com/apple-fixes-beats-studio-buds-vulnerability-allowing-nearby-eavesdropping/

‼️Apple has patched a high-severity vulnerability in Beats Studio Buds that could have allowed attackers within Bluetooth range to secretly eavesdrop through the earbuds’ microphone. Tracked as CVE-2025-20701, the flaw affected devices actively seeking pairing requests. Security researchers found that nearby attackers could potentially exploit the weakness without prior pairing. Apple addressed the issue in Beats Firmware Update 1B211, which is being delivered automatically to affected devices. If you use Beats Studio Buds, make sure your firmware is up to date. https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/ #Apple #BeatsStudioBuds #CyberSecurity #BluetoothSecurity #Vulnerability #Privacy #InfoSec