{ "document": { "acknowledgments": [ { "organization": "CERT@VDE", "summary": "coordinating", "urls": [ "https://certvde.com" ] }, { "names": [ "Mattar Bernhard" ], "organization": "Hummus Sec", "summary": "reporting" } ], "aggregate_severity": { "namespace": "https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "text": "6.5 (Medium)" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en-GB", "notes": [ { "category": "summary", "text": "The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet. ", "title": "Summary" }, { "category": "description", "text": "Sending an invalid connection request to a JBL Bluetooth Speaker causes it to crash or enter a deadlock state, halting music playback and disconnecting existing connections. Recovery requires manual reboot by the user, as reconnection is impossible in this state. ", "title": "Impact" }, { "category": "description", "text": "No remediation is available as of now. A manual reboot of the device by the user is required to restore functionality.", "title": "Remediation" } ], "publisher": { "category": "vendor", "contact_details": "productsecurity@harman.com", "name": "Harman International", "namespace": "https://www.harman.com" }, "references": [ { "category": "external", "summary": "CERT@VDE Security Advisories for Harman", "url": "https://certvde.com/en/advisories/vendor/harmann/" }, { "category": "self", "summary": "HBSA-2025-0002: BLE ICM Vulnerability in JBL Headphones - HTML", "url": "https://certvde.com/en/advisories/VDE-2025-089" }, { "category": "self", "summary": "HBSA-2025-0002: BLE ICM Vulnerability in JBL Headphones - CSAF", "url": "https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2025/hbsa-2025-0002.json" } ], "title": "BLE ICM Vulnerability in JBL Headphones", "tracking": { "aliases": [ "VDE-2025-089" ], "current_release_date": "2025-12-10T07:00:00.000Z", "generator": { "date": "2025-12-08T12:02:07.922Z", "engine": { "name": "Secvisogram", "version": "2.5.40" } }, "id": "HBSA-2025-0002", "initial_release_date": "2025-12-10T07:00:00.000Z", "revision_history": [ { "date": "2025-12-10T07:00:00.000Z", "number": "1.0.0", "summary": "Initial version" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Flip 5", "product": { "name": "JBL Flip 5", "product_id": "CSAFPID-1101", "product_identification_helper": { "skus": [ "050036359160", "050036359177", "050036359184", "050036359191", "050036359207", "050036359214", "050036359221", "050036359238", "050036359245", "050036359252", "050036359276", "050036359283", "050036359290", "050036359290", "050036359306", "050036359313", "050036359320", "050036359337", "050036359344", "050036359351", "050036359481", "050036359498", "050036361088", "050036367738", "050036367745", "050036367752", "050036367769", "050036367776", "050036367783", "050036367790", "050036367806", "050036367813", "050036367820", "050036367837", "050036370325", "050036370332", "050036370349", "050036370356", "050036372053", "050036372060", "050036376020", "050036377379", "050036377386", "050036377393", "050036386289", "050036397346", "050036397346", "1200130001710", "1200130004018", "1200130004018", "1200130005343", "4968929055777", "4968929055784", "4968929055791", "4968929055807", "4968929055814", "4968929055821", "4968929055838", "4968929055845", "4968929055852", "4968929055869", "4968929055999", "4968929068555", "6925281954566", "6925281954573", "6925281954573", "6925281954580", "6925281954580", "6925281954597", "6925281954597", "6925281954603", "6925281954610", "6925281954627", "6925281954634", "6925281954641", "6925281954658", "6925281954672", "6925281954689", "6925281954696", "6925281954702", "6925281954719", "6925281954726", "6925281954733", "6925281954740", "6925281954757", "6925281954894", "6925281954900", "6925281971037", "6925281971044", "6925281973406", "6925281973703", "6925281973727", "6925281973789", "6925281973796", "6925281973802", "6925281973819", "6925281973826", "6925281973833", "6925281977695", "6925281985607", "6925281997709", "7896359562787", "7896359562794", "7896359562800", "7896359562817", "7896359562824" ] } } }, { "category": "product_name", "name": "Flip 6", "product": { "name": "JBL Flip 6", "product_id": "CSAFPID-1102", "product_identification_helper": { "skus": [ "050036384315", "050036384315", "050036384322", "050036384322", "050036384339", "050036384339", "050036384346", "050036384346", "050036384353", "050036384360", "050036384377", "050036384384", "050036384391", "050036384407", "050036384414", "050036384421", "050036384438", "050036384445", "050036384452", "050036384469", "050036384476", "050036384483", "050036385220", "050036386784", "050036386807", "050036392501", "050036392556", "050036392563", "050036392679", "050036392808", "1200130001413", "4968929214204", "4968929214211", "4968929214228", "4968929214235", "4968929214242", "4968929214266", "4968929214273", "4968929214280", "6925281942662", "6925281992971", "6925281992971", "6925281992988", "6925281992995", "6925281992995", "6925281993008", "6925281993015", "6925281993039", "6925281993046", "6925281993053", "6925281993077", "6925281993107", "6925281993138", "6925281993145", "6925281994258", "6925281995163", "6925281995170", "6925281995217", "6925281995224", "6925281995767" ] } } }, { "category": "product_name", "name": "Pulse 4", "product": { "name": "JBL Pulse 4", "product_id": "CSAFPID-1103", "product_identification_helper": { "skus": [ "050036362320", "050036370608", "050036362306", "050036362290", "050036370615", "050036362313", "6925281958342", "7896359564729", "6925281958328", "6925281958311", "6925281974533", "6925281958335", "6925281973772", "4968929056897", "4968929056880" ] } } }, { "category": "product_name", "name": "Pulse 5", "product": { "name": "JBL Pulse 5", "product_id": "CSAFPID-1104", "product_identification_helper": { "skus": [ "50036389693", "50036389730", "50036393683", "4968929215959", "6925281900969", "6925281967849", "6925281999574" ] } } }, { "category": "product_name", "name": "Boombox 2", "product": { "name": "JBL Boombox 2", "product_id": "CSAFPID-1105", "product_identification_helper": { "skus": [ "050036368674", "050036368681", "050036368698", "050036368704", "050036368711", "050036368728", "050036368728", "050036368735", "050036368742", "050036368759", "050036368766", "050036368773", "050036368780", "050036368797", "050036368803", "050036376006", "050036376013", "050036381024", "050036381031", "4968929059614", "4968929059621", "6925281967955", "6925281967962", "6925281967979", "6925281967986", "6925281967993", "6925281968006", "6925281968006", "6925281968013", "6925281968037", "6925281968051", "6925281968051", "6925281968068", "6925281968075", "6925281968082", "6925281968112", "6925281968112", "6925281968129", "6925281980701", "6925281983702", "6925281983719", "6925281985058", "6925281996177", "6925281997716", "7896359566044", "7896359568185", "9346112023348" ] } } }, { "category": "product_name", "name": "Boombox 3", "product": { "name": "JBL Boombox 3", "product_id": "CSAFPID-1106", "product_identification_helper": { "skus": [ "050036389075", "050036389082", "050036389099", "050036389105", "050036392815", "4968929215423", "4968929215430", "50036389099", "50036389105", "50036389112", "50036389129", "50036389136", "50036389143", "50036389150", "50036389167", "50036389174", "50036389174", "50036389181", "50036389181", "50036389198", "50036389204", "50036389211", "50036389228", "50036389235", "50036389242", "50036392983", "6925281975578", "6925281975684", "6925281977916", "6925281977923", "6925281998744", "6925281998751", "6925281998768", "6925281998768", "6925281998775", "6925281998775", "6925281998782", "6925281998799", "6925281998805", "6925281998812", "6925281998829", "6925281998836", "6925281998843", "6925281998843", "6925281998843", "6925281998850", "6925281998850", "6925281998850", "6925281998867", "6925281998874", "6925281998881", "6925281998898", "6925281998904", "6925281998911", "9346112036607" ] } } }, { "category": "product_name", "name": "Xtreme 3", "product": { "name": "JBL Xtreme 3", "product_id": "CSAFPID-1107", "product_identification_helper": { "skus": [ "050036375115", "050036375054", "050036375061", "050036375078", "050036375085", "050036375092", "050036375108", "050036375115", "050036375122", "050036375139", "050036375146", "050036375153", "050036375160", "050036375177", "050036375184", "050036375191", "050036375207", "050036375214", "050036375221", "050036375238", "050036375245", "050036375252", "050036375269", "050036375276", "050036375283", "050036376907", "050036376914", "050036376921", "050036381826", "050036381833", "050036381840", "050036381857", "050036386302", "050036386319", "050036386326", "4968929078424", "4968929078431", "4968929078448", "6925281977459", "6925281977466", "6925281977473", "6925281977480", "6925281977497", "6925281977503", "6925281977510", "6925281977527", "6925281977534", "6925281977541", "6925281977558", "6925281977565", "6925281977572", "6925281977589", "6925281977596", "6925281977602", "6925281977602", "6925281977619", "6925281977619", "6925281977626", "6925281977633", "6925281977640", "6925281977657", "6925281977664", "6925281977671", "6925281977688", "6925281984945", "6925281984952", "6925281984969", "6925281984976", "6925281989858", "6925281989865", "6925281991080", "6925281992575", "6925281994326", "6925281999994", "7896359567355", "7896359567362", "9346112016715", "9346112030964" ] } } } ], "category": "vendor", "name": "JBL" } ], "product_groups": [ { "group_id": "CSAFGID-0001", "product_ids": [ "CSAFPID-1101", "CSAFPID-1102", "CSAFPID-1103", "CSAFPID-1104", "CSAFPID-1105", "CSAFPID-1106", "CSAFPID-1107" ], "summary": "Affected products." } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Mattar Bernhard" ], "organization": "Hummus Sec", "summary": "reporting" } ], "cve": "CVE-2024-2105", "cwe": { "id": "CWE-1287", "name": "Improper Validation of Specified Type of Input" }, "discovery_date": "2023-08-10T10:00:00.000Z", "notes": [ { "audience": "all", "category": "general", "text": "An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.", "title": "Description" } ], "product_status": { "known_affected": [ "CSAFPID-1101", "CSAFPID-1102", "CSAFPID-1103", "CSAFPID-1104", "CSAFPID-1105", "CSAFPID-1106", "CSAFPID-1107" ] }, "release_date": "2024-03-01T11:00:00.000Z", "remediations": [ { "category": "none_available", "date": "2025-07-01T10:00:00.000Z", "details": "No fix available", "group_ids": [ "CSAFGID-0001" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "environmentalScore": 6.5, "environmentalSeverity": "MEDIUM", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "temporalScore": 6.5, "temporalSeverity": "MEDIUM", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-1101", "CSAFPID-1102", "CSAFPID-1103", "CSAFPID-1104", "CSAFPID-1105", "CSAFPID-1106", "CSAFPID-1107" ] } ], "title": "JBL: Improper validation of ICM field in connection requests" } ] }