GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria

    1 vulnerability found for APPLE-SA-06-16-2026-1 Beats Firmware by unknown

    GCVE-1988-2026-0361

    Vulnerability from gna-1988 – Published: 2026-09-11 07:55 – Updated: 2026-09-11 07:55
    VLAI
    Title
    APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211 Beats Firmware Update 1B211 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/127557. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Bluetooth Available for: Beats Studio Buds Impact: An attacker within Bluetooth range may be able to listen through the microphone of a device which is not yet paired and actively seeking pair requests Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-20701: Dennis Heinze and Frieder Steinmetz of ERNW GmbH Firmware updates are automatically delivered while your headphones are paired with and in Bluetooth range of your iPhone, iPad, or Mac. You can check the firmware version of your wireless headphones in Bluetooth settings on your device. On iPhone or iPad, go to Settings > Bluetooth. On Mac, go to System Settings > Bluetooth. Then tap the info button next to your headphones. Learn more about firmware updates for Beats at https://support.apple.com/102368 All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmoxuxsACgkQ4Ifiq8DH 7PXgPxAAuS6HauhAAWkHVO6B/RyXJprMTPL8W0m3sAVgnNMZ/p4fzFmHIOqDQGZe BK2XnaWarFxxE1y6Rr6Quc0JkytqtF3EtTcb+uwcLBZzAaR93nKC1limZbYpH8T7 W4w+GcY9yr7brjfskQlbZb0953Q/aYR+2/tRhnImJD5dZ+7FOpdGqXYSI1y9Ykql ZtYjlm0kjPpQaSjgELX0vGY1sbT6x9sSDbZmob89lNWgiEL3lgQDWow9L7ba0K8b G+/Aewb9s6k2O58UvpU6vljwiLMj7XHRl3Z897Mj9qQEaxgxOuGo+tWSn8Obfd3D ygwPXi6b39ixE9qZN9MCcYuSHiSzyDSudmyImebZEMUZR5LdLRSom2i5mE8nyTyv QLmKR2ZI3RLWbT1DNqg4LwlecFrl058Mx9hblRmdNCKlU8DA5S4qc87GodIMcA1S JX6oFQNtQwCusBN0PihA3cZR2swI72T154ic/4IMVZGDASP5ijt0Ipaub+84+A3w 7w0zOF+0xVqRELftqwg+HtiYwoY0827osEENnv5P8MHuESvPiJIRHms4LduTUMUg gYx7+in09Bm0thHvxOC6+zvUNQkdbJPfotdj+t1zxO2pOL47RZjIVSu4OlwBSMZw jKhzH+nc1vRkc7SBx2qBDAGoAwJfby3et9iocfJYtLWT2/nREa4= =3VzD -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
    Severity
    No CVSS data available.
    Impacted products
    Relationships
    reference GCVE-1988-2026-0361 (this record)

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "product": "APPLE-SA-06-16-2026-1 Beats Firmware",
              "vendor": "unknown",
              "versions": [
                {
                  "status": "affected",
                  "version": "unknown"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Apple Product Security via Fulldisclosure"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-06-16-2026-1 Beats Firmware Update 1B211\n\nBeats Firmware Update 1B211 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/127557.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nBluetooth\nAvailable for: Beats Studio Buds\nImpact: An attacker within Bluetooth range may be able to listen through\nthe microphone of a device which is not yet paired and actively seeking\npair requests\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-20701: Dennis Heinze and Frieder Steinmetz of ERNW GmbH\n\nFirmware updates are automatically delivered while your headphones\nare paired with and in Bluetooth range of your iPhone, iPad, or Mac. \n\nYou can check the firmware version of your wireless headphones in\nBluetooth settings on your device. On iPhone or iPad, go to\nSettings \u003e Bluetooth. On Mac, go to System Settings \u003e Bluetooth.\nThen tap the info button next to your headphones.\n\nLearn more about firmware updates for Beats at\nhttps://support.apple.com/102368\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\njKhzH+nc1vRkc7SBx2qBDAGoAwJfby3et9iocfJYtLWT2/nREa4=\n=3VzD\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-11T07:55:57Z",
            "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
            "shortName": "VULNARCHIVE"
          },
          "references": [
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/18"
            },
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://seclists.org/fulldisclosure/2026/Jun/18"
            },
            {
              "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
            },
            {
              "url": "https://seclists.org/fulldisclosure/"
            },
            {
              "url": "https://support.apple.com/100100"
            },
            {
              "url": "https://support.apple.com/102368"
            },
            {
              "url": "https://support.apple.com/en-us/127557"
            },
            {
              "url": "https://www.apple.com/support/security/pgp/"
            }
          ],
          "source": {
            "defect": [
              "https://seclists.org/fulldisclosure/2026/Jun/18"
            ],
            "discovery": "EXTERNAL"
          },
          "title": "APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211",
          "x_gcve": [
            {
              "recordType": "reference",
              "relationships": [
                {
                  "destId": "CVE-2025-20701",
                  "type": "related"
                }
              ],
              "vulnId": "GCVE-1988-2026-0361",
              "x_vulnarchive": {
                "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/18",
                "automated": true,
                "contentSha256": "befc7ee2d4f9c331796dcafc2f8bd7366acd368a2e3d858ec40f1a2ec49d0d48",
                "evidenceScore": 6,
                "messageId": "",
                "originalUrl": "https://seclists.org/fulldisclosure/2026/Jun/18",
                "policy": "vulnarchive-1",
                "sourceFormat": "text/html",
                "sourcePublishedAt": "2026-06-16T22:21:35Z"
              }
            },
            {
              "recordType": "advisory",
              "vulnId": "gcve-1988-2026-0361"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "assignerShortName": "VULNARCHIVE",
        "datePublished": "2026-09-11T07:55:57Z",
        "dateUpdated": "2026-09-11T07:55:57Z",
        "state": "PUBLISHED",
        "vulnId": "GCVE-1988-2026-0361"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }