CVE-2025-41725: DoS vulnerability in JBL Flip 4

Q: Which devices are affected?

JBL Flip 4 devices running firmware versions earlier than 4.1.0 are affected.

Q: What does an attacker need to exploit this issue?

An attacker needs to send specific malformed Bluetooth messages to the device. Authentication is not required.

Q: What is the impact of successful exploitation?

The JBL Flip 4 may crash and become unavailable, causing a denial of service. The provided data does not indicate confidentiality or integrity impact.

Q: How can I remediate the issue?

Update affected JBL Flip 4 devices to firmware version 4.1.0 or later.

Published Nov 13, 2026

Updated

Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.

Affected Software

1 affected component

JBL Flip 4<4.1.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade JBL Flip 4 firmware to a version that resolves this vulnerability.
Fixed in 4.1.0

Event History

Nov 13, 2026

CVE Published

via MITRE·12:59 PM

Data Sourced

via MITRE·12:59 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which devices are affected?

JBL Flip 4 devices running firmware versions earlier than 4.1.0 are affected.

What does an attacker need to exploit this issue?

An attacker needs to send specific malformed Bluetooth messages to the device. Authentication is not required.

What is the impact of successful exploitation?

The JBL Flip 4 may crash and become unavailable, causing a denial of service. The provided data does not indicate confidentiality or integrity impact.

How can I remediate the issue?

Update affected JBL Flip 4 devices to firmware version 4.1.0 or later.

CVE-2025-41725: DoS vulnerability in JBL Flip 4

Affected Software

Remediation

Event History

Frequently Asked Questions

Which devices are affected?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

How can I remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Which devices are affected?

What does an attacker need to exploit this issue?

What is the impact of successful exploitation?

How can I remediate the issue?