For Skullcandy Dime 3 earbuds (model S2DCW) running firmware 1.0.0.28, there is no owner-accessible fix documented by CERT/CC. The vendor considers firmware 1.0.0.30 patched, but Skullcandy told CERT/CC that Dime 3 does not support firmware updates through its app, and the advisory says no consumer-accessible way to install the fix on existing units is known.
What is the Skullcandy Dime 3 flaw?
CERT/CC describes an unauthenticated Bluetooth pairing vulnerability, identified as CVE-2025-20701, in the Dime 3 on firmware 1.0.0.28. The earbuds use an Airoha chipset, identified through their Bluetooth PnP modalias; the advisory characterizes the issue as an Airoha Bluetooth audio SDK pairing problem. The finding applies to this model and firmware, not automatically to every Skullcandy product.
As an Amazon Associate I earn from qualifying purchases.
An unpaired Bluetooth Classic device within radio range can pair without the owner putting the earbuds into pairing mode or pressing a button, entering a PIN, or confirming the connection. After pairing, the attacker’s device is trusted and can reconnect automatically whenever it is in range.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What could someone do after pairing?
The unauthorized connection can interrupt the legitimate audio connection and access the earbuds’ hands-free headset profile, potentially capturing live microphone audio. CERT/CC does not specify a precise distance for an attack; it requires the attacker to be within Bluetooth radio range. Techlicious gives about 30 feet as a general approximation, not a guaranteed boundary or a measurement specific to every environment.
#1 Best Overall
- UP TO 20 HOURS BATTERY + RAPID CHARGE. Stay connected with up to 20 hours of battery life (8 hours in the earbuds plus an additional 12 hours in charging case). With Rapid Charge, just 10 minutes of charging gives you 2 hours of listening
- SWEAT AND WATER RESISTANT. Rated IPX4 with sweat and water resistance, these buds are made to withstand any adventure while blocking out unwanted ambient noise
- POCKET-FRIENDLY DESIGN. Compact and lightweight, Dime 3’s pocket-able size and built-in strap makes it easy to take anywhere.
- BUILT-IN TILE FINDING TECHNOLOGY. Find your earbuds near and far when you register your product in the Tile App
- PRESET EQ MODES. Select between 3 preset EQ modes (Music, Bass Boost and Podcast) to best suit your audio
The earbuds’ audible “New device paired” notice is not a warning that lets the owner stop the initial connection: according to CERT/CC, it plays after unauthorized pairing has already succeeded.
Is there a firmware fix, and can owners install it?
There is a patched firmware version, but that does not mean owners can apply it to affected earbuds. CERT/CC says the vendor considers firmware 1.0.0.30 effective against CVE-2025-20701. The same advisory says Skullcandy confirmed that Dime 3 does not support updates through the Skullcandy application and reports no known consumer-accessible method to move existing affected units from 1.0.0.28 to 1.0.0.30.
Rank #2
- UP TO 20 HOURS BATTERY + RAPID CHARGE. Stay connected with up to 20 hours of battery life (8 hours in the earbuds plus an additional 12 hours in charging case). With Rapid Charge, just 10 minutes of charging gives you 2 hours of listening
- SWEAT AND WATER RESISTANT. Rated IPX4 with sweat and water resistance, these buds are made to withstand any adventure while blocking out unwanted ambient noise
- POCKET-FRIENDLY DESIGN. Compact and lightweight, Dime 3’s pocket-able size and built-in strap makes it easy to take anywhere.
- BUILT-IN TILE FINDING TECHNOLOGY. Find your earbuds near and far when you register your product in the Tile App
- PRESET EQ MODES. Select between 3 preset EQ modes (Music, Bass Boost and Podcast) to best suit your audio
In other words, the advisory identifies a fixed version but no practical update route for an owner with an affected pair. CERT/CC released and revised its advisory on September 8, 2026; its update-status information is specific to that advisory date.
Recommended Free Tools
What should affected owners do?
- Check the exact model and firmware. This advisory concerns Dime 3 model S2DCW on firmware 1.0.0.28. Do not assume another Skullcandy model or firmware version has the same flaw.
- Watch for an unexpected pairing notice. The “New device paired” sound can indicate that pairing has already occurred; it is not a pre-connection prompt.
- Check for an official update route. The CERT/CC advisory does not provide a consumer update method for existing affected units. Check current Skullcandy support information for any change since the advisory, rather than assuming the patched firmware can be installed through the app.
- Consider avoiding use or replacing the affected pair if the risk is unacceptable. A charging case, generic Bluetooth accessory, or reinstalling an app does not address this firmware vulnerability. No replacement model is established by the cited sources as a verified security fix.
What this finding does not establish
The advisory does not provide a confirmed attack distance, prevalence figure, or evidence that every Dime 3 owner has been targeted. It also does not establish that other earbuds using Airoha components share this exact issue. Those products need their own model-specific advisories and firmware information.
Rank #3
- UP TO 20 HOURS BATTERY + RAPID CHARGE. Stay connected with up to 20 hours of battery life (8 hours in the earbuds plus an additional 12 hours in charging case). With Rapid Charge, just 10 minutes of charging gives you 2 hours of listening
- SWEAT AND WATER RESISTANT. Rated IPX4 with sweat and water resistance, these buds are made to withstand any adventure while blocking out unwanted ambient noise
- POCKET-FRIENDLY DESIGN. Compact and lightweight, Dime 3’s pocket-able size and built-in strap makes it easy to take anywhere.
- BUILT-IN TILE FINDING TECHNOLOGY. Find your earbuds near and far when you register your product in the Tile App
- PRESET EQ MODES. Select between 3 preset EQ modes (Music, Bass Boost and Podcast) to best suit your audio
Primary source: CERT/CC VU#859658: Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability. Secondary range context: Techlicious coverage.
Quick Recap
Best Value
- UP TO 20 HOURS BATTERY + RAPID CHARGE. Stay connected with up to 20 hours of battery life (8 hours in the earbuds plus an additional 12 hours in charging case). With Rapid Charge, just 10 minutes of charging gives you 2 hours of listening
- SWEAT AND WATER RESISTANT. Rated IPX4 with sweat and water resistance, these buds are made to withstand any adventure while blocking out unwanted ambient noise
- POCKET-FRIENDLY DESIGN. Compact and lightweight, Dime 3’s pocket-able size and built-in strap makes it easy to take anywhere.
- BUILT-IN TILE FINDING TECHNOLOGY. Find your earbuds near and far when you register your product in the Tile App
- PRESET EQ MODES. Select between 3 preset EQ modes (Music, Bass Boost and Podcast) to best suit your audio
Rank #4
- UP TO 36 HOURS BATTERY + RAPID CHARGE. Stay connected with up to 36 hours of battery life (8 hours in the earbuds plus an additional 28 hours in charging case). Rapid Charge gives you 2 hours of listening from a quick 10-minute charge.
- SWEAT AND WATER RESISTANT. Rated IPX4 with sweat and water resistance, these buds are made to withstand any adventure while blocking out unwanted ambient noise.
- ADJUSTABLE STAY-AWARE MODE. Hear what’s going on around you without taking your earbuds off. With adjustable levels through the Skullcandy App, you decide how much of the outside world you let in.
- CUSTOMIZATION IN THE SKULLCANDY APP. Download the app to customize EQs or choose from presets, configure button settings to your liking, and even trigger a photo from your earbud.
- BUY WITH CONFIDENCE. Skullcandy 1-Year USA Limited Warranty included.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
