Description
An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JBL | Flip 5 | — | — |
| JBL | Flip 6 | — | — |
| JBL | Pulse 4 | — | — |
| JBL | Pulse 5 | — | — |
| JBL | Boombox 2 | — | — |
| JBL | Boombox 3 | — | — |
| JBL | Xtreme 3 | — | — |
Advisories 1
- HBSA-2025-0002 BLE ICM Vulnerability in JBL Headphones CERT@VDE · Dec 10, 2025