Description
Affected devices running firmware versions prior to 4.1.0 may crash and become unavailable when receiving specific malformed Bluetooth messages from an unauthenticated attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JBL | Flip 4 | 0.0.0 – < 4.1.0 | 4.1.0 |
Advisories 1
- HBSA-2025-0003 JBL: DoS vulnerability in Flip 4 CERT@VDE · Nov 13, 2026
References
- https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2026/hbsa-2025-0003.json vendor-advisory
- https://certvde.com/en/advisories/VDE-2025-090/ vendor-advisory