{"id":90529,"date":"2018-07-25T11:56:01","date_gmt":"2018-07-25T18:56:01","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=90529"},"modified":"2025-08-13T01:16:18","modified_gmt":"2025-08-13T08:16:18","slug":"bluetooth-bug","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/bluetooth-bug\/","title":{"rendered":"Millions of iOS and Android Users Could Be Compromised by Bluetooth Bug"},"content":{"rendered":"

Similar to smartphones and computers, Bluetooth is one of the modern-day pieces of tech that has spread wide and far. Billions of devices of all types around the world have the technology woven into their build. So when news about the BlueBorne vulnerabilities<\/a> broke back in late 2017, everyone\u2019s ears perked up. Fast forward to present day and a new Bluetooth flaw has emerged<\/a>, which affects devices containing Bluetooth from a range of vendors\u2014including Apple, Intel, Google, Broadcom, and Qualcomm.<\/p>\n

Whether it\u2019s connecting your phone to a speaker so you can blast your favorite tunes, or pairing it with your car\u2019s audio system so you can make phone calls hands-free, the pairing capabilities of Bluetooth ensures the technology remains wireless. And this bug affects<\/a>\u00a0precisely that \u2014 Bluetooth’s Secure Simple Pairing and Low Energy Secure Connections, which are capabilities within the tech designed to assist users with pairing devices in a safe and secure way.<\/p>\n

Essentially, this vulnerability means that when data is sent from device to device over Bluetooth connections, it is not encrypted, and therefore vulnerable. And with this flaw affecting Apple, Google and Intel-based smartphones and PCs, that means millions of people may have their private data leaked. Specifically, the bug allows an attacker that\u2019s within about 30 meters of a user to capture and decrypt data shared between Bluetooth-paired devices.<\/p>\n

Lior Neumann, one of the researchers who found the bug, stated, \u201cAs far as we know, every Android\u2014prior to the patch published in June\u2014and every device with a wireless chip from Intel, Qualcomm or Broadcom is vulnerable.\u201d That includes iPhone devices with a Broadcom or Qualcomm chip as well.<\/p>\n

Tips to Secure Your Devices<\/h2>\n

Fortunately, fixes for this bug within Apple devices have already been available since May with the release of iOS 11.4. Additionally, two Android vendors, Huawei and LG, say they have patched the vulnerability as well. However, if you don\u2019t see your vendor on this list, or if you have yet to apply the patches \u2013 what next steps should you take to secure your devices? Start by following these tips:<\/p>\n