Redmi Buds Vulnerability Allow Attackers Access Call Data and Trigger Firmware Crashes

Security researchers disclosed critical Bluetooth RFCOMM vulnerabilities in Xiaomi Redmi Buds (models from Redmi Buds 3 Pro to Redmi Buds 6 Pro): CVE-2025-13834 permits out-of-bounds reads of up to 127 bytes (potentially exposing phone numbers and other sensitive memory), and CVE-2025-13328 enables Denial of Service via packet flooding; both are exploitable without pairing using only the device MAC from ~20 meters and no firmware patch from Xiaomi has been announced.