AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone set to receive from anyone, with no tap or prompt. The same research found Quick Share flaws that

Researchers at CISPA Helmholtz Center identified six vulnerabilities across Apple AirDrop and Android/Windows Quick Share implementations, including three pre-authentication bugs in AirDrop that let a nearby attacker crash AirDrop, AirPlay, Handoff, Universal Clipboard, and Continuity Camera with a single malformed request, and protocol flaws in Quick Share that can bypass device-to-device encryption and user consent under certain conditions.[1][2][3] These issues affect billions of devices and can be exploited by anyone within roughly 10–30 meters using only a Wi‑Fi-equipped laptop, without pairing, prior contact, or a shared network.[2][3] From a CyberSE.AI perspective, any AI agent or application that relies on these proximity-sharing channels for data ingestion, model deployment artifacts, or cross-device orchestration may inherit availability and integrity risks from the underlying OS features, so organizations should treat AirDrop/Quick Share as part of their AI supply chain, document these dependencies in SBOMs, and apply continuous red teaming to validate that AI workflows fail safely when these services are disrupted or abused.