CVE-2024-27867

First published: Tue Jun 25 2024(Updated: )

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

Credit: Jonas Dreßler product-security@apple.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/severity
• agent/type
• agent/description
• agent/first-publish-date
• agent/softwarecombine
• collector/apple-support
• source/Apple
• agent/software-canonical-lookup
• agent/references
• agent/author
• agent/event
• agent/tags
• collector/nvd-api
• source/NVD
• agent/last-modified-date
• collector/mitre-cve
• source/MITRE
• vendor/apple
• canonical/apple airpods firmware update a326
• canonical/apple airpods firmware update f8
• canonical/apple beats firmware update f8