Smartphones vulnerable through headphones – serious security flaw discovered
Researchers have uncovered a critical vulnerability in headphones equipped with Airoha chips, used by popular brands including Sony WH and WF, Marshall Major V and Minor IV, JBL Live Buds 3, among others. This flaw allows attackers to gain unauthorized access to users’ smartphones, posing a significant security threat.
Source Security Lab
The vulnerability stems from an unsecured interface in Airoha chips that lets an attacker extract the headphones’ unique address from memory and connect to the smartphone. The phone mistakenly authenticates this key, granting full system access. Ready-made software already exists to hijack messenger accounts via this exploit.
Researchers have released a tool allowing users to assess their risk, while headphone manufacturers are rolling out patches. Users are advised to update their device firmware immediately to safeguard their gadgets.
