Malwarebytes
Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds
Part of the CVE-2025-20701 story · since 18 Jun
- Thu 18 Jun, 20:10 UTC. Ars Technica, first report. Apple patches Beats Buds eavesdropping bug CVE-2025-20701.
- Fri 19 Jun, 12:21 UTC. Malwarebytes, its first report on the story. Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds. This article, 2nd of 2.
Apple has addressed a critical Bluetooth vulnerability, tracked as CVE-2025-20701, affecting Beats Studio Buds that could allow attackers to eavesdrop on users via the earbuds' microphones. This flaw relates to improper verification during the pairing process, enabling unauthorized connections to the device before it's fully paired. While attackers must be within Bluetooth range to exploit this vulnerability, Apple has released Firmware Update 1B211 to mitigate the risk, primarily affecting devices in pairing mode. Users can check their firmware version through Bluetooth settings on their Apple devices.
How the story developed
2 articles from 2 outlets since 18 Jun. Quiet since 19 Jun. This was the 2nd report, 16 hours after the first.
- Thu 18 Jun, 20:10 UTC. Ars Technica, first report. Apple patches Beats Buds eavesdropping bug CVE-2025-20701.
- Fri 19 Jun, 12:21 UTC. Malwarebytes, its first report on the story. Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds. This article, 2nd of 2.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Thu 18 JunDay 01
- Apple patches Beats Buds eavesdropping bug CVE-2025-2070120:10 · Ars Technica · First report
- Fri 19 JunDay 11
- Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds12:21 · Malwarebytes · This article, 2nd of 2