Researchers from Gamer Nexus and cybersecurity experts conducted tests on LG smart TVs, including the G5 model. Network traffic analysis and firmware study revealed that the devices actively scan local wireless networks, identifying smartphones, smartwatches, computers, and other equipment not necessarily related to TV operation.
The devices collect internal IP and MAC addresses, device names, signal parameters, and information about nearby Wi-Fi networks, including their names, signal levels, and channels. This data can be used to identify devices and determine their location, although researchers noted they could not decrypt all traffic to determine the exact content of every packet.
The investigation also examined the Automatic Content Recognition (ACR) technology. This system captures audio and video data, including screenshots and audio fragments, to create digital fingerprints for matching with media databases. This telemetry works even when an external source is connected via HDMI, and the data is processed by LG Ad Solutions for targeted advertising.
LG operates approximately 216 million smart TVs worldwide. By scanning secondary devices, the company has access to data from approximately 363 million devices in the USA alone, allowing for more precise advertising. The TVs analyze user viewing habits through selective capture of audio and video content.
The most critical finding involves vulnerabilities in webOS. Researchers found that the TV can be used to record audio from a connected microphone even when the screen appears to be off. Recordings were stored locally when offline and became accessible via vulnerability exploitation after reconnection to the network.
Some vulnerabilities, including those related to remote code execution, are currently undergoing a responsible disclosure process, and technical details are not yet public. The researchers recommend disconnecting LG TVs from the network and using separate devices for online services.
