Home Back

AirPods Firmware Update Patches Bluetooth Security Vulnerability

Pcmag 2 days ago

Attackers could potentially spoof a person's phone and take control of their AirPods.

Your AirPods may be lower on the list of devices you worry about getting hacked, but a new firmware update for Apple's wireless earbuds tackles a Bluetooth-related bug.

At first glance, the update seems fairly mundane. Apple's patch notes point to the usual "bug fixes and other improvements." However, Apple's security website offers some additional details. Namely, it talks about a Bluetooth security vulnerability that was patched with the 6F8 and 6A326 updates. The vulnerability, which is tracked as CVE-2024-27867, essentially allows potential attackers to spoof your device to connect to your AirPods.

"When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones," Apple says.

The vulnerability impacts the 2nd generation AirPods, all models of the AirPods Pro, AirPods Max, Powerbeats Pro, and Beats Fit Pro. Jonas Dreßler is credited with finding the bug.

For most folks, the update will apply automatically when you connect your AirPods to your iPhone. To make sure it installs, go to Settings > Bluetooth and check your firmware version. Those on Mac can go to System Settings > Bluetooth to see it there.

Here are the latest firmware versions for each AirPods product. Note that the first-gen AirPods don't have this security flaw and have a different update numbering system.

  • AirPods Pro (2nd generation) with MagSafe Charging Case (USB-C): 6F8
  • AirPods Pro (2nd generation) with MagSafe Charging Case (Lightning): 6F8
  • AirPods Pro (1st generation): 6A326
  • AirPods (3rd generation): 6A326
  • AirPods (2nd generation): 6A326
  • AirPods Max: 6A326
  • AirPods (1st generation): 6.8.8

The AirPods update comes less than a week after Apple rolled out a visionOS update that fixed several security flaws, including one that allowed a malicious attacker to bypass warnings in Safari and spam your room with animated 3D objects.

People are also reading