Archive · 1 Jul 2025
Bluetooth Headphone Security Flaw Affects Sony, JBL, Bose Models
Imagine your headphones are like a tiny computer, and a bad guy can sneak into them without your permission.
A problem with the chips in many popular headphones, like Sony and Bose, allows hackers to do just that.
They can listen to what you're listening to, see who you call, or even turn your headphones into a secret microphone.
The company that makes the chips has fixed the problem, but the fix needs to be installed on your headphones.
Until then, be careful about who's around you when you use them.
Security flaw found in Bluetooth headphones using Airoha chips, affecting major brands.
Vulnerability allows hackers to access devices without pairing, within a 10-meter range.
Attackers can view media, extract contacts, initiate calls, and potentially use headphones as microphones.
Over 100 models, including Sony, JBL, and Bose, are likely affected by the security flaw.
Airoha has released a fix, but no firmware updates have reached consumers yet.
- Who
- Affects users of Bluetooth headphones from brands like Sony, JBL, and Bose; discovered by ERNW.
- What
- A security flaw in Bluetooth headphones.
- When
- The flaw was discovered recently; a fix has been released but not implemented in user devices.
- Where
- The vulnerability affects headphones and earbuds using Airoha chips.
- Why
- The vulnerability allows unauthorized access to user data and potential surveillance due to a flaw in the Airoha Bluetooth chips.
User Risk
Security Risks
Level of Risk
User Risk
The immediate threat to everyday users is comparatively lower.
Security Risks
Heightened caution is advised for high-risk users like journalists and government personnel.
- Affected Devices
- Sony, JBL, Bose, Jabra, Marshall, and more.
- Vulnerability Type
- Bluetooth security flaw
- Affected Chip Manufacturer
- Airoha
- Attack Range
- Within 10 meters
- Potential Threats
- Data extraction, call initiation, surveillance
- Fix Status
- Airoha released a patch; no consumer firmware updates yet