Headphone Jacking - A Key to Your Phone
Demonstrates TROOPERS25: Headphone Jacking - A Key to Your Phone and evaluates key implications for security practitioners.
Summary
Overview: Bluetooth Headphone Jacking: A Key to Your Phone. Dennis Heinze and Frieder Steinmetz. Three vulnerabilities in Airoha Bluetooth audio chips: CVE-2025-20700, CVE-2025-20701, CVE-2025-20702. Missing authentication for RACE protocol; dump RAM/flash; steal Bluetooth link keys; impersonate headphones toward a paired phone. Tooling released for checking affected devices. Vendors include Sony, Marshall, Beyerdynamic, Jabra.
Related talks
HITCON 2025·42 min
Engineers explore architecture and security mechanisms for Headphone Jacking: A Key to Your Phone.
Talks·55 min
Anti Forensics
Presents TROOPERS25: Anti Forensics - You are doing it wrong Believe me, practitionersm an IR consultant and evaluates key implications for security practitioners.
Talks·45 min
Discusses TROOPERS25: Authenticating through Windows Hello for Business, a reverse engineering story and evaluates key implications for security practitioners.