The Carnegie Mellon University CERT Coordination Center (CERT/CC) has reported that Skullcandy Dime 3 wireless earbuds automatically accept Bluetooth pairing requests from nearby unpaired devices without requiring any user confirmation. This lack of user interaction in the pairing process creates a vulnerability that could allow an attacker in proximity to hijack the Bluetooth connection, potentially gaining unauthorized access or control over the earbuds. The report does not specify any available patches or fixes from the vendor, nor does it indicate active exploitation in the wild.

The vulnerability allows unauthorized devices to pair with Skullcandy Dime 3 earbuds without user consent, which could lead to Bluetooth hijacking. This may result in unauthorized audio interception, manipulation, or denial of service to the legitimate user. However, no confirmed exploits or widespread attacks have been reported to date.

No official patch or remediation has been indicated. Users should exercise caution by avoiding use of the earbuds in untrusted or public environments until a vendor fix or advisory is issued. Monitoring vendor communications for updates is recommended. Since no vendor advisory or patch information is available, patch status is not yet confirmed—check the vendor advisory for current remediation guidance.