Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking
Source Bleeping Computer
Description
Skullcandy Dime 3 wireless earbuds accept Bluetooth pairing requests from nearby unpaired devices without requiring user interaction, potentially allowing unauthorized Bluetooth hijacking. This behavior can expose users to unauthorized access or control of the earbuds via Bluetooth connections. No patch or official remediation guidance is currently provided. Users should be aware of this risk when using these earbuds in public or untrusted environments.
Impact
The vulnerability allows unauthorized devices to pair with Skullcandy Dime 3 earbuds without user consent, which could lead to Bluetooth hijacking. This may result in unauthorized audio interception, manipulation, or denial of service to the legitimate user. However, no confirmed exploits or widespread attacks have been reported to date.
Defensive guidance
No official patch or remediation has been indicated. Users should exercise caution by avoiding use of the earbuds in untrusted or public environments until a vendor fix or advisory is issued. Monitoring vendor communications for updates is recommended. Since no vendor advisory or patch information is available, patch status is not yet confirmed—check the vendor advisory for current remediation guidance.