Improper Validation Vulnerability in Harman Bluetooth Devices
CVE-2024-2105

6.5MEDIUM

Key Information:

Vendor

Jbl

Status
Flip 5
Flip 6
Pulse 4
Pulse 5
Vendor
CVE Published:
10 December 2025

What is CVE-2024-2105?

An improper validation vulnerability exists in certain Harman Bluetooth devices that may allow an unauthorized attacker within Bluetooth range to exploit the BLE connection request. This vulnerability can lead to a deadlock situation, affecting the device's normal operational state. Users are encouraged to update their devices to mitigate potential security risks.

Affected Version(s)

Boombox 2 *

Boombox 3 *

Flip 5 *

References

https://harman.csaf-tp.certvde.com/.well-known/csaf/white...
vendor-advisory
https://certvde.com/en/advisories/VDE-2025-089

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mattar Bernhard from Hummus Sec
JSON
.
CVE-2024-2105 : Improper Validation Vulnerability in Harman Bluetooth Devices