The Patching Friars' AlmanacA calendar of CVE saints

Patron of January 15

WhisperPairHoly card for whisperpair, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 psst WhisperPair AUDIO TE
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint WhisperPair, Whisperer of Headphones

Patron of Bluetooth headphones, earbuds that pair with anyone, and people who take loud phone calls on the train.

Life

Revealed in January 2026 by KU Leuven researchers, he nested in Google Fast Pair. Many accessories accepted a new pairing even when they weren't in pairing mode: a stranger nearby could take over someone else's headphones, listen through the microphone and even track their movements.

Prayer

O Saint WhisperPair, who pairs without being invited, let our headphones listen only to us. Amen.

How to celebrate

Celebrated by updating your headphones' firmware with the vendor's app, which of course nobody had ever installed.

Pair with everyone, and you're faithful to no one.

Technical record

Disclosed on
January 15 2026
CVE
CVE-2025-36911
CVSS
7.1
Product
Google · Android

In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation.

Sources: whisperpair.eu

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.