LG OLED Smart TVs have been found to map nearby mobile devices, record voice audio when their screens are turned off, and function as clandestine eavesdropping devices, according to a technical investigation published by YouTube channel Gamers Nexus.
The details of the analysis were published on the Gamers Nexus YouTube channel following research conducted in collaboration with technology outlet Level1Techs and independent security analysts, news agency Europa Press reported on Tuesday.
Researchers used a range of network interception methodologies to inspect the behavior of the televisions, including code disassembly and Wireshark, one of the most widely used open-source network protocol analyzers.
Local Network Scanning and Audio Recording
Network traffic analysis performed using Wireshark demonstrated that LG televisions actively scan local home networks to detect unrelated electronics, including smartphones.
During these network scans, the televisions extract and record specific technical data, including IP addresses, network Service Set Identifiers (SSIDs), signal strength from neighboring Wi-Fi networks, and precise geographical location coordinates.
Investigators discovered that when an LG television screen was turned off and the device was disconnected from the home network, it continued to record local voice audio.
The recorded voice data was saved directly onto the television's internal flash memory storage. Once the network connection was re-established, the stored audio files were automatically uploaded to corporate servers operated by LG.
Security Vulnerabilities in webOS
The investigation further exposed critical security vulnerabilities within webOS, the Linux-based operating system used across LG smart televisions.
These software vulnerabilities allow unauthorized parties to gain administrative root privileges and access the television system remotely. With root access enabled, the system can be transformed into a remote listening device capable of broadcasting live ambient audio from the surrounding room.
Voice capture on the compromised devices is not restricted to the microphones built into the television or its remote control. Researchers noted that the system can also extract audio from external peripheral equipment connected to the television, such as USB webcams.
The research team highlighted that this unauthorized audio harvesting presents a significant security risk for corporate and professional environments, where large-screen televisions are routinely installed in conference rooms and executive spaces.
Automatic Content Recognition and Ad Targeting
In addition to voice recording, the televisions utilize Automatic Content Recognition (ACR) technology. While ACR technology is widely used across the smart TV industry, LG's implementation captures six-second clips of both video and audio content while users watch the screen.
The system processes these six-second clips to generate a unique digital fingerprint or hash of the viewed material, which is then transmitted back to LG.
The gathered information is routed directly to LG Ad Solutions, the advertising and data monetization platform of the South Korean electronics manufacturer.
While LG has sold approximately 216 million smart televisions globally, researchers reported that data collection activities encompass around 363 million connected devices in the United States alone. The collected data is compiled into detailed user activity profiles, which are subsequently sold to commercial advertisers.
