Your earbuds should not become someone else\u2019s microphone.<\/p>\n
Apple released Beats Firmware Update 1B211 on June 16 to fix a Bluetooth vulnerability in Beats Studio Buds that could have let an attacker within range listen through the earbuds\u2019 microphone while the device was unpaired and actively seeking a connection.<\/p>\n
The issue, tracked as CVE-2025-20701, highlights why wireless accessories should be part of routine device security checks, especially when they are used near work phones, laptops, calls, and voice assistants.<\/p>\n
What Apple fixed<\/p>\n
Apple<\/a> patched a Bluetooth vulnerability in Beats Studio Buds that could have exposed the earbuds\u2019 microphone under specific pairing conditions.<\/p>\n In its security advisory<\/a>, Apple said an attacker within Bluetooth range may have been able to listen through the microphone of a device that was not yet paired and was actively seeking a pairing request.<\/p>\n The flaw is tracked as CVE-2025-20701. Apple described it as a vulnerability in open source code and said Apple software was among the affected projects. The company credited Dennis Heinze and Frieder Steinmetz of ERNW GmbH for reporting the issue.<\/p>\n The Hacker News reported<\/a> that CVE-2025-20701 involved incorrect authorization in the Airoha Bluetooth audio SDK, which could allow a Bluetooth audio device to pair without user consent. The publication also reported that the vulnerability carried a CVSS score of 8.8.<\/p>\n ERNW researchers had previously discussed related Airoha system-on-a-chip flaws<\/a> at the TROOPERS security conference in Germany. According to The Hacker News, the researchers said many of the vulnerabilities could allow attackers to take over headphones via Bluetooth without authentication or pairing.<\/p>\n Must-read security coverage<\/p>\n Why the attack window is limited<\/p>\n This is not the kind of remote attack<\/a> that can reach someone from across the internet.<\/p>\n An attacker would need to be within Bluetooth range, and the Beats Studio Buds would need to be unpaired and actively looking for a pairing request.<\/p>\n Malwarebytes explained<\/a> that the flaw affected the authentication process during pairing. In a normal pairing flow, headphones and a phone establish trust before sensitive functions, such as microphone access, become available. In this case, a nearby attacker could potentially pose as a legitimate pairing partner before the user finishes connecting the earbuds.<\/p>\n That makes the issue more relevant to targeted attacks<\/a> than to broad criminal campaigns. Opportunistic attackers are still more likely to use phishing, password theft, or credential stuffing than specialized Bluetooth attacks.<\/p>\n The concern is sharper for people who handle sensitive calls or data in public spaces, including executives, journalists, public officials, security staff, and employees working near shared devices.<\/p>\n How to check the update<\/p>\n Apple said Beats firmware updates are delivered automatically while the headphones are paired with and in Bluetooth range of an iPhone, iPad, or Mac.<\/p>\n There is no manual \u201cupdate now\u201d button for Beats Studio Buds. Users can check the installed firmware version in Bluetooth settings.<\/p>\n