Researchers report several security vulnerabilities affecting device-to-device sharing features, including Apple’s AirDrop and Android/Windows implementations of Google and Samsung’s Quick Share. The findings, published June 30 by researchers Arash Ale Ebrahim and Nils Ole Tippenhauer at the CISPA Helmholtz Center for Information Security, focus on how nearby devices discover and exchange data over wireless protocols.
According to the reports, an attacker located within wireless range—typically cited as roughly 10 to 30 meters—can trigger disruptive behavior in AirDrop and Quick Share without any prior pairing or shared network. In Apple’s AirDrop, the attack can cause the receiving service to crash before the user sees a file transfer request or prompt. The crash can also temporarily interfere with other Apple Continuity-related features such as AirPlay, Handoff, and Universal Clipboard.
The research also identifies multiple vulnerabilities in Quick Share that enable similar nearby attack scenarios. Some outlets characterize the impact as significant but emphasize that the practical risk depends on device configuration, such as limiting who can send you files. Collectively, the sources agree the issues require physical proximity and do not rely on an existing trust relationship.
