Security Flaws in LG Smart TVs Expose Network Mapping and Unauthorized Audio Collection

Smart TVs use Automated Content Recognition to track viewing habits. Research indicates these devices also perform network surveillance and unauthorized audio capture.

1. LG Ad Solutions manages data from 216 million smart TVs worldwide. This reach supports content recognition and targeted advertising. The company tracks viewing habits by creating digital fingerprints of on-screen audio and video.

2. Smart TVs use Automated Content Recognition (ACR) to suggest content to viewers. Manufacturers describe this as a standard industry practice. These devices also map local networks to locate other hardware. They connect to printers and smart-home devices. This integration simplifies device management for users.

3. LG Ad Solutions reports access to 363 million secondary addressable devices in the US. The company tracks hardware connected to the same network as the television. This data builds a profile of the digital environment within a household.

4. Existing reports focus on the security and privacy implications of these features. The researcher examined the claims and found no evidence that these vulnerabilities offer any benefits.

1. Researchers demonstrated that compromised LG TVs record audio through microphones while in standby mode. These devices capture and transcribe conversations not intended as voice commands. This vulnerability exposes private user data.

2. Independent investigators from Gamers Nexus and Level1Techs reported remote-code-execution vulnerabilities to LG. These flaws allow unauthorized access to the device. Investigators stated that these vulnerabilities enable attackers to control hardware and access local network data.

3. Testing showed that LG smart TVs record information about nearby Wi-Fi networks, such as signal strength and network names. The devices collect this data without explicit user consent. This practice gathers information from outside the television.

4. The devices store audio recordings locally while disconnected from the internet. They upload these files once a connection returns. This process occurs even when the device appears to be offline.