# MA-1086.062024: MyCERT Advisory - Firmware Updates-Apple Products

**Date:** 30 Jun 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1086.062024  
**Advisory ID:** MA-1086.062024

---

**1.0 Introduction**
Recently, Apple has released security updates to address a vulnerability (CVE-2024-27867) in AirPods and Beats firmware.
**2.0 Impact**
An attacker within Bluetooth range could potentially spoof a connection request and gain access to your headphones. Thus, unauthorized access to your headphones could allow an attacker to eavesdrop on your conversation.
**3.0 Affected Products**
The list of affected products:
- AirPods (2nd generation and later)
- AirPods Pro (all models)
- AirPods Max
- Powerbeats Pro
- Beats Fit Pro
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review the [Apple security release](https://support.apple.com/en-us/HT201222) and apply the necessary updates:
Patched Firmware Versions: AirPods Frimware update 6A326, AirPods Firmware Update 6F8, Beats Firmware Update 6F8.
You may find the security content for the patched firmware version in the following URL: <https://support.apple.com/en-us/HT214111>
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact the Cyber999 Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0    References**
- <https://thehackernews.com/2024/06/apple-patches-airpods-bluetooth.html?&web_view=true>
- <https://support.apple.com/en-us/HT214111>
- <https://www.tenable.com/cve/CVE-2024-27867>
- <https://support.apple.com/en-us/HT214111>