Apple has addressed a significant privacy concern in its popular Beats Studio Buds wireless earbuds with a recent security update that patches a critical vulnerability. The flaw, which could have allowed malicious actors within Bluetooth range to secretly activate the microphone and listen to private conversations, represents yet another reminder of the security challenges inherent in our increasingly connected world of personal audio devices.
The vulnerability, designated as CVE-2025-20701, carried an alarming CVSS score of 8.8, placing it firmly in the high-severity category. This specific issue originated in the Airoha Bluetooth audio SDK integrated into the earbuds, which contained an incorrect authorization weakness. This flaw essentially eliminated a crucial security barrier, permitting unauthorized Bluetooth pairing without the device owner's knowledge or consent. Security researchers determined that attackers exploiting this vulnerability could establish a connection to the targeted earbuds, thereby gaining access to the microphone functionality and transforming the personal audio device into an unwitting eavesdropping tool.
Owners of Beats Studio Buds were the primary population affected by this security shortcoming, though the broader implications extend to all users of Bluetooth-enabled audio devices. The matter demands attention because our wireless earbuds have become ubiquitous companions in both professional and