CVE-2024-27867

State: Published
Severity: 3.3 Low
Published: Jun 26, 2024
Updated: Apr 2, 2026
Reserved: Feb 26, 2024

Description

An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
AirPodsApple	before unknownAffected

References

https://support.apple.com/en-us/120907
https://support.apple.com/en-us/HT214111
https://support.apple.com/kb/HT214111
http://seclists.org/fulldisclosure/2024/Jul/2

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.