JBL Pulse 4 vulnerabilities

Latest JBL Pulse 4 CVEs

Newest publication first

1. CVE-2024-2105 JBL: Improper validation of ICM field in connection requests

   Published 2025-12-10

   Medium·CVSS 6.5 EPSS 0.21%

   An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.