Most recent entries from csaf_harmaninternational

HBSA-2025-0001 — BLE GATT Service Vulnerability in JBL Headphones

Wed, 10 Dec 2025 07:00:00 +0000

Due to improper BLE security configurations and lack of authentication on the GATT server of JBL LIVE PRO 2 TWS and JBL TUNE FLEX Headphones, unauthenticated users can read and write device control commands through the mobile app service.

HBSA-2025-0002 — BLE ICM Vulnerability in JBL Headphones

Wed, 10 Dec 2025 07:00:00 +0000

The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet.

HBSA-2025-0003 — JBL: DoS vulnerability in Flip 4

Wed, 18 Feb 2026 07:00:00 +0000

The Bluetooth Classic implementation on JBL Flip 4 devices with firmware version prior to 4.1.0 does not properly handle malformed LMP messages and causes the entire device to crash. Any attacker in radio range can exploit this vulnerability.