Apple Patches Beats Studio Buds Flaw Allowing Nearby Attackers to Spy via Microphone
Apple has released a firmware update for Beats Studio Buds wireless earbuds to address a high-severity vulnerability, CVE-2025-20701 (CVSS 8.8), that could…
Tag: Bluetooth
CVE-2025-20701: Incorrect Authorization in Airoha Bluetooth Audio SDK
A high-severity vulnerability in the Airoha Bluetooth audio SDK allows unauthorized Bluetooth pairing without user consent, enabling nearby attackers to eavesdrop via…
CVE-2025-20700: Airoha SoC Bluetooth Vulnerability
One of three flaws in Airoha SoCs disclosed at TROOPERS, allowing attackers to take over headphones via Bluetooth without authentication.
CVE-2025-20702: Airoha SoC Bluetooth Vulnerability
Another flaw in Airoha SoCs enabling Bluetooth takeover without authentication, part of the same disclosure as CVE-2025-20700 and CVE-2025-20701.
ERNW GmbH
German cybersecurity research firm that discovered the Airoha Bluetooth vulnerabilities and presented at TROOPERS.
Jabra
Audio equipment manufacturer that released similar patches for Airoha Bluetooth vulnerabilities in December 2025.
Beats Studio Buds
Wireless earbuds by Apple/Beats affected by CVE-2025-20701. Patched via firmware update 1B211.
Airoha Bluetooth Audio SDK
Software development kit for Bluetooth audio devices containing the incorrect authorization flaw leading to CVE-2025-20701.
Airoha System-on-Chips
Bluetooth SoCs vulnerable to multiple flaws including CVE-2025-20700, CVE-2025-20701, and CVE-2025-20702.
TROOPERS Security Conference
Annual security conference in Germany where ERNW GmbH researchers disclosed the Airoha Bluetooth vulnerabilities in June 2025.