CVE-2024-2105: JBL: Improper validation of ICM field in connection requests
Published Dec 10, 2025
·Updated
An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.
Affected Software
1 affected component
JBL JBL Devices
Event History
Dec 10, 2025
CVE Published
via MITRE·01:01 PM
Data Sourced
via MITRE·01:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-2105?
The severity of CVE-2024-2105 is considered high due to the potential for denial of service attacks via Bluetooth connections.
2
How do I fix CVE-2024-2105?
To fix CVE-2024-2105, update your JBL devices to the latest firmware version provided by JBL that addresses this vulnerability.
3
What types of devices are affected by CVE-2024-2105?
CVE-2024-2105 affects JBL Bluetooth devices that utilize Bluetooth Low Energy for connection requests.
4
What is the impact of CVE-2024-2105?
The impact of CVE-2024-2105 could lead to device deadlock, making it unresponsive to legitimate Bluetooth connections.
5
Who is at risk from CVE-2024-2105?
Individuals using vulnerable JBL Bluetooth devices are at risk from unauthorized attackers within Bluetooth range.