Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
AIThis post was created with the assistance of artificial intelligence (AI).

TL;DR

Before you orderOffer from Amazon

Get privacy and security gear delivered free with Prime

  • Fast, free delivery on millions of items
  • Prime Video, Amazon Music and more included
  • Member-only deals all year
Start your free Prime trial Free trial for eligible customers · Cancel anytime
As an affiliate, we earn on qualifying purchases.

Apple has issued a security patch for Beats Studio Buds to fix a high-severity vulnerability that could enable eavesdropping and access to call history. The flaw affects Bluetooth connectivity and has been confirmed by security researchers.

Apple has released a firmware update for Beats Studio Buds addressing a high-severity vulnerability that could allow malicious actors to eavesdrop on audio streams and access call data. The fix comes after security researchers identified a flaw in the Bluetooth communication protocol used by the earbuds, which could be exploited to intercept audio and retrieve sensitive information.

The vulnerability, identified as CVE-2025-20701, was discovered by security firm SentinelOne and is linked to a flaw in the Bluetooth handling of Beats Studio Buds. Exploiting this flaw could enable attackers within Bluetooth range to intercept audio streams, potentially allowing eavesdropping on conversations and retrieving call logs. Apple has confirmed the release of a firmware update that patches this issue, urging users to update their devices promptly.

According to SentinelOne, the flaw stems from a weakness in the Bluetooth protocol implementation that could be manipulated to perform man-in-the-middle attacks or passive eavesdropping. The vulnerability is classified as high severity due to its potential impact on user privacy and security. Apple has not reported any known exploits in the wild but recommends updating immediately to mitigate risks.

Why This Security Fix Matters for Users

This update is significant because it addresses a high-severity vulnerability that could compromise user privacy and security. Eavesdropping on audio streams and accessing call data could expose sensitive conversations and personal information. As wireless earbuds become increasingly integrated into daily life, vulnerabilities like this highlight the importance of timely security updates to protect consumers from potential malicious exploits.

Amazon

Beats Studio Buds firmware update

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Bluetooth Vulnerabilities and Industry-Wide Risks

This vulnerability is part of a broader set of Bluetooth security issues affecting multiple device manufacturers. Previously, researchers disclosed vulnerabilities affecting over a dozen devices from brands like Sony, Nothing, JBL, OnePlus, and Google, related to Bluetooth protocol weaknesses that could be exploited for eavesdropping and device geolocation. While active exploitation remains rare, these flaws demonstrate ongoing risks in wireless communication security, especially as Bluetooth devices become more prevalent and integrated into personal and professional environments.

“The flaw in the Bluetooth implementation of Beats Studio Buds could allow attackers within range to intercept audio streams and access call logs, posing serious privacy risks.”

— an anonymous researcher

Amazon

Bluetooth security earbuds

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Unresolved Aspects of the Bluetooth Vulnerability

It is not yet clear whether the vulnerability has been exploited in the wild or if other Bluetooth devices from different manufacturers share similar flaws. Details about the specific methods attackers could use remain limited, and the full scope of potential impacts is still being assessed by security researchers.

Amazon

wireless earbuds with privacy protection

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Next Steps for Users and Industry Stakeholders

Apple has issued a firmware update for Beats Studio Buds, and users are advised to install it immediately. Industry-wide, security researchers continue to monitor Bluetooth protocols for similar vulnerabilities. Manufacturers are expected to review their Bluetooth implementations and improve security measures. Ongoing research and disclosure efforts aim to prevent future exploits and enhance wireless device security.

Amazon

Beats Studio Buds replacement parts

As an affiliate, we earn on qualifying purchases.

As an affiliate, we earn on qualifying purchases.

Key Questions

How do I know if my Beats Studio Buds are affected?

If your earbuds are running the latest firmware, they are protected against this specific vulnerability. Check your device settings or firmware version via the Beats app or your device’s Bluetooth settings.

How can I protect myself from potential Bluetooth eavesdropping?

Turn off Bluetooth on your device when not in use, especially in public or untrusted environments. Keep your device firmware updated regularly to ensure security patches are applied.

Apple typically releases security updates as needed. Users should monitor official channels for firmware updates and security advisories.

Are other Bluetooth devices at similar risk?

Many Bluetooth devices share similar vulnerabilities; ongoing research indicates that multiple manufacturers’ products could be affected. Users should apply updates and exercise caution when using Bluetooth in sensitive situations.

Source: Ars Technica


EVERGREEN BESTSE

Evergreen bestsellers Picks

As an affiliate, we earn on qualifying purchases.

You May Also Like

Cyber Threats And IoT Cameras: The New Frontier Of Data Leaks

Security researchers reveal IoT cameras shipping sensitive tokens, raising concerns over data leaks and cyber threats targeting connected devices.

Actively Exploited Sandbox RCE In All Chromium Versions

Security researchers warn that a sandbox escape vulnerability is actively exploited across all Chromium-based browsers, posing significant security risks.

Iran scrambles to move estimated $8.5bn in oil as US eases sanctions

Iran is actively loading crude oil onto tankers following a temporary US sanctions relaxation, potentially earning $8.5 billion. Details are still emerging.

Obama national security adviser Rice blasts ‘flimsy’ Iran agreement: ‘So many concessions were granted’

Former Obama adviser Susan Rice condemns the new Iran deal, citing major concessions and strategic risks, raising concerns over its effectiveness.