Ars TechnicaDan Goodin
Apple patches Beats Buds eavesdropping bug CVE-2025-20701
Part of the CVE-2025-20701 story · since 18 Jun
- Thu 18 Jun, 20:10 UTC. Ars Technica, first report. Apple patches Beats Buds eavesdropping bug CVE-2025-20701. This article, 1st of 2.
- Fri 19 Jun, 12:21 UTC. Malwarebytes, its first report on the story. Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds.
Apple has released a firmware update for its Beats Studio Buds to address a severe eavesdropping vulnerability identified as CVE-2025-20701. This flaw allowed nearby hackers to exploit improper authentication in the earbuds' Bluetooth firmware, potentially enabling them to listen through the device's microphone. The update, delivered automatically while connected to compatible Apple devices, is pivotal due to the vulnerability's high severity rating of 8.8 out of 10.
This issue arose from security revelations related to Bluetooth chips by Airoha Systems, affecting multiple manufacturers, including Jabra, Bose, and JBL, which have also issued patches. Users are advised to review their firmware versions and remain cautious with Bluetooth settings to enhance security.
How the story developed
2 articles from 2 outlets since 18 Jun. Quiet since 19 Jun. This was the first report.
- Thu 18 Jun, 20:10 UTC. Ars Technica, first report. Apple patches Beats Buds eavesdropping bug CVE-2025-20701. This article, 1st of 2.
- Fri 19 Jun, 12:21 UTC. Malwarebytes, its first report on the story. Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 2 articles as a listHide the list
- Thu 18 JunDay 01
- Apple patches Beats Buds eavesdropping bug CVE-2025-2070120:10 · Ars Technica · First report · This article, 1st of 2
- Fri 19 JunDay 11
- Apple patches CVE-2025-20701 Bluetooth flaw in Beats Studio Buds12:21 · Malwarebytes