Header Ads

Sony WH-1000XM5 Firmware Update Version 2.4.1

Sony WH-1000XM5 Firmware Update Version 2.4.1

Sony has released a new firmware update for the WH-1000XM5. The update has only one change and it is related to security.

  • Enhances the security features of the system software

If this sounds familiar, it is, because in the 2.3.1 update, Sony already had such an update for enhanced security features as well. Similar security updates were released for the WH-1000MX4 and WF-1000XM4 in the middle of October 2024. Not sure if Sony is adding further enhancements but perhaps so.

Update: This update fixes another vulnerability discovered by Keiichiro Kimura et al. from Kobe University, see here. Thank you Anonymous for the comment.

You can read about the issue at quarkslab blog, by Baptiste Boyer, who discovered this vulnerability. 

I do wonder why the WF-1000XM5 did not get an update for this when the WF-1000XM4 did?

3 comments:

  1. The Japanese version of the update site has been updated with information about the patch content.
    https://www.sony.jp/headphone/update/

    It appears that v2.4.1 is a patch for a vulnerability discovered by Keiichiro Kimura et al. from Kobe University.
    As of March 7, the English version has not yet been updated with this information.

    They have published the details on GitHub.
    https://github.com/trapedev/WH-1000XM5_Auth_Vuln_Fixed_v2.4.1

    ReplyDelete
    Replies
    1. appreciated, will update the post.

      Delete
    2. Sorry, the English version seems to have been updated after I commented.

      "The February 27, 2025, fixed a security vulnerability in the communication aspect of the Bluetooth function.
      We would like to extend our gratitude to Mr. Keiichiro Kimura, Prof. Hiroki Kuzuno, Prof. Yoshiaki Shiraishi, and Prof. Masakatu Morii at Kobe University for notifying us regarding this security vulnerability."

      https://www.sony.com/electronics/support/wireless-headphones-bluetooth-headphones/wh-1000xm5/software/00278246

      Delete

Powered by Blogger.