CVE-2024-58101

High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor.

Published 2025-05-14. Last modified 2026-06-17.