GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GCVE-1988-2026-0361

Vulnerability from gna-1988 – Published: 2026-09-11 07:55 – Updated: 2026-09-11 07:55
VLAI
Title
APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211 Beats Firmware Update 1B211 addresses the following issues. Information about the security content is also available at https://support.apple.com/en-us/127557. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Bluetooth Available for: Beats Studio Buds Impact: An attacker within Bluetooth range may be able to listen through the microphone of a device which is not yet paired and actively seeking pair requests Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org. CVE-2025-20701: Dennis Heinze and Frieder Steinmetz of ERNW GmbH Firmware updates are automatically delivered while your headphones are paired with and in Bluetooth range of your iPhone, iPad, or Mac. You can check the firmware version of your wireless headphones in Bluetooth settings on your device. On iPhone or iPad, go to Settings > Bluetooth. On Mac, go to System Settings > Bluetooth. Then tap the info button next to your headphones. Learn more about firmware updates for Beats at https://support.apple.com/102368 All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmoxuxsACgkQ4Ifiq8DH 7PXgPxAAuS6HauhAAWkHVO6B/RyXJprMTPL8W0m3sAVgnNMZ/p4fzFmHIOqDQGZe BK2XnaWarFxxE1y6Rr6Quc0JkytqtF3EtTcb+uwcLBZzAaR93nKC1limZbYpH8T7 W4w+GcY9yr7brjfskQlbZb0953Q/aYR+2/tRhnImJD5dZ+7FOpdGqXYSI1y9Ykql ZtYjlm0kjPpQaSjgELX0vGY1sbT6x9sSDbZmob89lNWgiEL3lgQDWow9L7ba0K8b G+/Aewb9s6k2O58UvpU6vljwiLMj7XHRl3Z897Mj9qQEaxgxOuGo+tWSn8Obfd3D ygwPXi6b39ixE9qZN9MCcYuSHiSzyDSudmyImebZEMUZR5LdLRSom2i5mE8nyTyv QLmKR2ZI3RLWbT1DNqg4LwlecFrl058Mx9hblRmdNCKlU8DA5S4qc87GodIMcA1S JX6oFQNtQwCusBN0PihA3cZR2swI72T154ic/4IMVZGDASP5ijt0Ipaub+84+A3w 7w0zOF+0xVqRELftqwg+HtiYwoY0827osEENnv5P8MHuESvPiJIRHms4LduTUMUg gYx7+in09Bm0thHvxOC6+zvUNQkdbJPfotdj+t1zxO2pOL47RZjIVSu4OlwBSMZw jKhzH+nc1vRkc7SBx2qBDAGoAwJfby3et9iocfJYtLWT2/nREa4= =3VzD -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Impacted products
Vendor Product Version CPE status
unknown APPLE-SA-06-16-2026-1 Beats Firmware Affected: unknown
guessed Create a notification for this product.
Relationships
reference GCVE-1988-2026-0361 (this record)

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "APPLE-SA-06-16-2026-1 Beats Firmware",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-06-16-2026-1 Beats Firmware Update 1B211\n\nBeats Firmware Update 1B211 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/127557.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nBluetooth\nAvailable for: Beats Studio Buds\nImpact: An attacker within Bluetooth range may be able to listen through\nthe microphone of a device which is not yet paired and actively seeking\npair requests\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-20701: Dennis Heinze and Frieder Steinmetz of ERNW GmbH\n\nFirmware updates are automatically delivered while your headphones\nare paired with and in Bluetooth range of your iPhone, iPad, or Mac. \n\nYou can check the firmware version of your wireless headphones in\nBluetooth settings on your device. On iPhone or iPad, go to\nSettings \u003e Bluetooth. On Mac, go to System Settings \u003e Bluetooth.\nThen tap the info button next to your headphones.\n\nLearn more about firmware updates for Beats at\nhttps://support.apple.com/102368\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\njKhzH+nc1vRkc7SBx2qBDAGoAwJfby3et9iocfJYtLWT2/nREa4=\n=3VzD\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-11T07:55:57Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/18"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Jun/18"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/102368"
        },
        {
          "url": "https://support.apple.com/en-us/127557"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Jun/18"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2025-20701",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0361",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/18",
            "automated": true,
            "contentSha256": "befc7ee2d4f9c331796dcafc2f8bd7366acd368a2e3d858ec40f1a2ec49d0d48",
            "evidenceScore": 6,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Jun/18",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-06-16T22:21:35Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0361"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-11T07:55:57Z",
    "dateUpdated": "2026-09-11T07:55:57Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0361"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…