The fix is only real once the earbuds come back into range of an Apple device. A patched firmware exists, but Beats Studio Buds that are unpaired, idle, or offline can sit on the old code until they reconnect, so a simple "vendor patched it" read misses the delay.
Apple says Beats Firmware Update 1B211 fixes CVE-2025-20701. The flaw affects Beats Studio Buds and can let a nearby attacker listen through the microphone before pairing is complete; Apple says the update is delivered automatically when the buds are paired and within Bluetooth range of an iPhone, iPad, or Mac.