Do Son WhisperPair flaw (CVE-2025-36911) exposes Google Fast Pair devices to hijacking and tracking. Update your headphone firmware now to block silent attacks.
Bluetooth security
Critical Redmi Buds flaws (CVE-2025-13834) allow data theft and device crashes via Bluetooth. "Heartbleed"-style bug has no patch. Disable Bluetooth now.
Apache NimBLE flaws (CVE-2025-62235) allow Bluetooth spoofing and eavesdropping. Update to v1.9.0 now to secure your IoT devices against attacks.
ERNW exposes "Headphone Jacking," a critical Airoha RACE flaw in Sony & JBL chips allowing hackers to eavesdrop and hijack connected smartphones.
At the root cause of BLUFFS attacks are two novel vulnerabilities within the Bluetooth standard's session key derivation process.