Beats Studio Buds Bluetooth Microphone Vulnerability: Firmware 1B211 Fix

Apple has confirmed a Bluetooth security vulnerability affecting Beats Studio Buds and released firmware 1B211 as the fix. The issue could allow an attacker within Bluetooth range to listen through the microphone of earbuds that were not yet paired and were actively seeking pairing requests.

Current status: resolved-pending-verification. Apple confirms the vulnerability and the intended firmware fix, but SoundPath Lab has not found an independent technical retest or two independent owner confirmations proving that firmware 1B211 eliminates the issue.

Issue record

What Apple confirmed

Apple says a nearby attacker could listen through the microphone of Beats Studio Buds that were not paired and were actively seeking pairing requests. The company identifies the issue as CVE-2025-20701 and credits Dennis Heinze and Frieder Steinmetz of ERNW GmbH. Apple says the underlying problem affected open-source code used by the software.

The advisory does not establish that every unit, region or historical firmware build was vulnerable. It also does not provide a measured exploitation rate or evidence that the issue was used against consumers in the wild.

Official firmware fix

Apple released Beats firmware 1B211 on 16 June 2026. Beats firmware updates are delivered automatically while the headphones are paired with and within Bluetooth range of an iPhone, iPad or Mac.

Owners can check the installed firmware version in the Bluetooth information screen on an iPhone, iPad or Mac. A device showing 1B211 has received Apple’s stated fix. A later firmware should not automatically be described as security-equivalent unless Apple’s release information confirms that the fix is retained.

What owners should do

1. Pair the Beats Studio Buds with an iPhone, iPad or Mac and keep the earbuds within Bluetooth range so the automatic update can be delivered.
2. Check the firmware version in the device’s Bluetooth information screen.
3. Until 1B211 or a later confirmed security-fixed version is installed, avoid leaving the earbuds in an active pairing state in public or other untrusted environments.
4. If the update does not arrive, follow Apple’s current Beats firmware support instructions rather than installing files from third-party download sites.

Facts, inference and unknowns

Confirmed facts: Apple identifies Beats Studio Buds as affected, describes the nearby microphone-listening impact, assigns CVE-2025-20701 and names firmware 1B211 as the security update released on 16 June 2026.

Reasonable inference: Beats Studio Buds running older firmware may remain exposed until the update is installed. Apple does not enumerate the full vulnerable firmware range, so SoundPath Lab does not convert this into a more precise version claim.

Unknown: exact hardware revisions, regional scope, real-world exploitation, attack frequency, an Android-only update path and independent post-update reproduction results.

Verification status

This record remains resolved-pending-verification, not resolved-verified. Apple’s advisory confirms the issue and intended fix, but the available public evidence does not include an independent technical retest or two independent owner confirmations showing that the microphone-access path can no longer be reproduced on firmware 1B211.

Source

• Apple Support — About the security content of Beats Firmware Update 1B211

Related: Product Issues & Limitations · Firmware & App Update Tracker · Truth & Risks

Revision history

• 16 August 2026: Initial record created from Apple’s official security advisory. Status set to resolved-pending-verification; exact pre-fix firmware range and independent retest remain Unknown.
• 17 August 2026: Rechecked Apple’s advisory and both SoundPath Lab public trackers. The advisory was unchanged, no independent post-fix retest was found, and no duplicate SoundPath Lab record existed.

Feature image: neutral editorial illustration created for SoundPath Lab. It is not an official Beats product image and contains no brand marks.