GoKawiilApple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allow attackers in Bluetooth range to spy on users' conversations.
"An attacker within Bluetooth range may be able to listen through the microphone of a device which is not yet paired and actively seeking pair requests," Apple explained in a Tuesday advisory.
"This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party."
Apple patched the vulnerability in Beats Firmware Update 1B211, which will be automatically delivered to vulnerable headphones when they are paired and within Bluetooth range of the user's iPhone, iPad, or Mac.
You can check whether the firmware has been applied from the Bluetooth settings on your device by tapping the info button next to the headphones.
The security flaw (CVE-2025-20701) was discovered by Dennis Heinze and Frieder Steinmetz of ERNW GmbH in the Airoha system-on-a-chip (SoCs).
When they disclosed the vulnerability one year ago at the TROOPERS security conference in Germany, the ERNW security researchers said that it stems from a missing authentication weakness in the Bluetooth BR/EDR radio.
They also created a proof-of-concept exploit that allows attackers to initiate a call and eavesdrop on conversations within earshot of the targeted phone.
Reading currently playing media from vulnerable device (ERNW)
When chaining CVE-2025-20701 with two other vulnerabilities (tracked as CVE-2025-20700 and CVE-2025-20702) impacting the same vulnerable component, the attackers can also use the Bluetooth Hands-Free Profile (HFP) to issue commands to the phone after hijacking the connection between the phone and a paired Bluetooth audio device.
... continue reading