Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.
References
| Link | Resource |
|---|---|
| https://www.tarlogic.com/blog/cve-2024-58101 |
Configurations
No configuration.
History
16 May 2025, 14:43
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-14 20:15
Updated : 2025-05-16 14:43
NVD link : CVE-2024-58101
Mitre link : CVE-2024-58101
CVE.ORG link : CVE-2024-58101
JSON object : View
Products Affected
No product.
CWE
CWE-862
Missing Authorization