willnix
Re:Bluetooth Headphone Jacking: A Key to Your Phone [video]
on Friday January 02, 2026 @02:36PM (#46468477)
Your understanding is correct :)
Re:Bluetooth Headphone Jacking: A Key to Your Phone [video]
on Thursday January 01, 2026 @02:41PM (#46457307)
One of the researchers here.
Many people seem to prefer text to videos, which I sympathize with.
So please excuse me hijacking the top comment with links to our blog post and white paper:
Blog: https://insinuator.net/2025/12/bluetooth-headphone-jacking-f...
Re:Bluetooth Headphone Jacking: A Key to Your Phone [video]
on Sunday December 28, 2025 @09:51AM (#46411457)
During our research we discovered three vulnerabilities (CVE-2025-20700, CVE-2025-20701, CVE-2025-20702) in popular Bluetooth audio chips developed by Airoha. These chips are used by many popular device manufacturers in numerous Bluetooth headphones and earbuds.
The identified vulnerabilities may allow a complete device compromise. We demonstrate the immediate impact using a pair of current-generation headphones. We also demonstrate how a compromised Bluetooth peripheral can be abused to attack paired devices, like smartphones, due to their trust relationship with the peripheral.
Examples of affected vendors and devices are Sony (e.g., WH1000-XM5, WH1000-XM6, WF-1000XM5), Marshall (e.g. Major V, Minor IV), Beyerdynamic (e.g. AMIRON 300), or Jabra (e.g. Elite 8 Active).