Apple has fixed a security flaw in Beats Studio Buds which let hackers spy on conversations
- Apple patches CVE‑2025‑20701, a high‑severity Bluetooth flaw in Beats Studio Buds enabling eavesdropping within range
- Researchers showed attackers could chain related bugs to hijack headphones, issue phone commands, and read/write device memory
- Fixed in Beats Firmware Update 1B211, auto‑installed when pairing with iPhone, iPad, or Mac
Apple has fixed a high-severity vulnerability in its Beats Studio Buds wireless earbuds that allowed threat actors to eavesdrop on people’s conversations if they were in Bluetooth range.
The vulnerability was discovered in 2025 by security researchers Dennis Heinze and Frieder Steinmetz of ERNW. It has been assigned CVE-2025-20701 and was given a severity score of 8.8/10 (high).
The researchers explained it stemmed from a missing authentication weakness in the Bluetooth BR/EDR radio, and also published a proof-of-concept (PoC) exploit that showed how malicious actors might initiate a call and listen in on people’s conversations, as long as they were within Bluetooth range.
Issuing...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
