CVE Tools
Track your stack

CERT предупреждает о небезопасности наушников Skullcandy

Хакер (xakep.ru)By Мария Нефёдова

AdvisorySkullcandy Dime 3Airoha Bluetooth Audio SDK

Our summary

CERT/CC has highlighted that Skullcandy Dime 3 headphones accept Bluetooth pairing requests without owner confirmation, allowing nearby attackers to intercept audio and access the microphone. This issue stems from CVE-2025-20701 in the Airoha Bluetooth Audio SDK, affecting devices running firmware 1.0.0.28. While Airoha released a patch in August 2025 and Skullcandy fixed it in firmware 1.0.0.30, users with older firmware currently have no way to apply the update via the Skullcandy app or manual methods.

Read at Хакер (xakep.ru)

Хакер (xakep.ru) publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsCVE-2025-20701
  2. BleepingComputerSkullcandy Dime 3 earbuds expose users to Bluetooth hijackingCVE-2025-20701
  3. Хакер (xakep.ru)Уязвимость в наушниках Apple Beats Studio позволяла подслушивать разговорыCVE-2025-20701
  4. SecurityWeekIn Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS ContinuumCVE-2025-20701
  5. The Hacker NewsApple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via MicrophoneCVE-2025-20701
  6. Ars Technica (Security)Apple patches high-severity eavesdropping vulnerability in Beats Studio BudsCVE-2025-20701
  7. BleepingComputerApple fixes Beats Studio Buds flaw that let hackers spy on conversationsCVE-2025-20701

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store