www.uniladtech.com LG Smart TVs Exposed for Eavesdropping and Data Collection
Article Content
- •LG smart TVs can record audio while appearing off and scan local networks for devices.
- •Vulnerabilities in webOS allow for potential remote code execution and unauthorized access.
- •Users are advised to disconnect LG TVs from the internet to mitigate privacy risks.
An investigation by Gamers Nexus, Level1Techs, and independent researchers revealed that LG smart TVs, particularly the OLED G5 model, can scan local networks, log voice commands, and record audio even while appearing to be off. The TVs utilize Automatic Content Recognition (ACR) technology to track viewing habits and can identify nearby devices, including smartphones and smartwatches. Researchers found that compromised LG TVs could be turned into covert listening devices, storing audio locally and uploading it once reconnected to the internet. The investigation highlighted significant security vulnerabilities, including remote code execution flaws in LG's webOS, which could allow attackers to gain deeper access to the devices. LG's advertising division claims to reach 363 million devices, raising privacy concerns about data collection practices. The findings have prompted recommendations for users to disconnect their TVs from the internet and consider using external streaming devices instead. LG has not publicly responded to the investigation's findings.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (17)
Following this threat?
Track LG and CVE-2018-17173 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…