LG smart TVs are the focus of a new investigation that found several models can identify devices on a home network, collect nearby Wi-Fi information, and may capture audio even when the TV appears to be off. The findings turn a living-room screen into a device that can observe other hardware on the same network and listen through its microphone.
Gamers Nexus and Level1Techs
Gamers Nexus carried out the investigation with Level1Techs and independent security researchers. Packet captures and firmware analysis showed the tested LG TVs identifying phones, PCs, printers, switches, and smart-home hardware on the local network, while also collecting nearby Wi-Fi network names, signal information, and device-related identifiers.
Audio on an LG TV
The researchers also demonstrated how a compromised LG TV could capture audio through its microphone, including when the TV appeared to be off. They showed the audio could be stored while the TV was unplugged from the internet and retrieved after the connection was restored, which means a loss of connectivity did not end the recording path.
ACR on Smart TVs
Malwarebytes has described Automated Content Recognition, or ACR, as technology that samples what appears on or is heard through a TV, creates a digital fingerprint, and compares that fingerprint against a reference database. That mechanism can be used to identify programs, ads, and viewing habits, and it sits alongside the broader pattern of smart TVs acting as internet-connected computers with microphones and access to the same home network used by phones, laptops, printers, and smart-home devices.
Some of the findings concern intended product behavior, while others depend on remote-code-execution vulnerabilities that researchers reported to LG and are still being disclosed responsibly. Owners of the affected LG TVs are left with a narrower practical choice than most consumer software users get: treat the television as part of the home network, not just a passive display, and watch closely for the vulnerability details that have not yet been fully disclosed.
