9To5Mac Critical Bluetooth Vulnerability in Beats Earbuds Allows Eavesdropping
Article Content
- •A Bluetooth vulnerability in Beats Studio Buds allows eavesdropping via the microphone.
- •The flaw is tracked as CVE-2025-20701 and was discovered by ERNW GmbH researchers.
- •Apple has released firmware version 1B211 to fix the vulnerability, which users must manually ensure is installed.
A serious security vulnerability has been discovered in Apple's Beats Studio Buds, allowing attackers within Bluetooth range to eavesdrop through the device's microphone. The flaw, identified as CVE-2025-20701, is linked to an open-source Airoha Bluetooth Audio SDK used in the earbuds. For exploitation, the earbuds must be unpaired and actively searching for connections. Apple has released firmware version 1B211 to address this issue, which was reported by security researchers Dennis Heinze and Frieder Steinmetz from ERNW GmbH. The vulnerability was known since mid-2025 but was only patched in June 2026. Users are advised to ensure their devices are updated to the latest firmware to mitigate the risk. The vulnerability also affects other earbuds using the same SDK, not just Beats products.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (27)
Following this threat?
Track ERNW and CVE-2025-20700 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Bluetooth Vulnerabilities Enable Silent Attacks on Audio Devices Recent research has uncovered vulnerabilities in Airoha-based Bluetooth headphones and earbuds (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) that allow attackers within Bluetooth range to bypass authentication and access device memory. The flaws stem from implementation issues in the RACE protocol, enabling… 
Security Flaw in Beats Studio Buds Allows Eavesdropping via Bluetooth A vulnerability in Apple's Beats Studio Buds was discovered, allowing attackers to exploit an insecure Bluetooth pairing window. This flaw, identified as CVE-2025-20701, enables unauthorized pairing with the earbuds, potentially allowing eavesdropping through the device's microphone. Apple released a firmware update…