LG TVs Expose Remote-Code-Execution Flaws, Allowing Audio Capture When Off

3 articles · Updated · Malwarebytes Labs · Sep 7

Researchers said several LG smart TV models contain remote-code-execution vulnerabilities that could let a compromised set record microphone audio, including when the TV appears off.
Gamers Nexus, Level1Techs and independent researchers also found the TVs mapping local networks—identifying phones, PCs, printers and smart-home devices—and collecting nearby Wi-Fi names, signal data and device identifiers.
Combined with ACR viewing data and advertising IDs, that information could build detailed household profiles and give attackers a foothold to probe other devices on home or business networks.
Full exploit details were withheld during responsible disclosure to LG; users were urged to install firmware updates, disable ACR, voice and ad features, and isolate TVs on a separate IoT or guest network.

Sources

Left50%

Center50%

Malwarebytes Labs11h ago

LG Smart TV Flaws Allow Audio Capture, Remote Code Execution

allaboutcookies.org11h ago

LG Smart TVs Caught Listening With the Screen Off and Snooping Around Your Wi-Fi | All About Cookies

Yahoo8h ago

LG Smart TVs Caught Recording Audio in Standby and Scanning Your Network

8 Sources

Could the hidden data collection in your television be the real reason modern screens are sold at such surprisingly low prices?

If smart screens now function as household surveillance tools, what other supposedly harmless appliances are quietly building profiles on your family?

Is your living room TV secretly mapping your entire home network and recording audio even after you disconnect it from the internet?