LG smart TVs reportedly scan local networks, log audio in standby, and transmit data even offline

The analysis highlights two distinct but overlapping risks in LG smart TVs: pervasive data collection and exploitable security flaws. The ad software embedded in these devices does not merely track viewing habits, it reportedly scans local networks to map nearby devices, including phones and Wi-Fi networks. This behavior extends beyond traditional automatic content recognition (ACR), raising concerns about the scope of data harvested from users' environments. The persistence of this scanning, even when the TV is off or disconnected, suggests a design prioritizing data extraction over user control.

The security flaws compound these privacy risks. The built-in microphone can allegedly be exploited to eavesdrop on conversations, even when the TV is in standby mode. This vulnerability transforms a consumer device into a potential surveillance tool, accessible to malicious actors. The combination of network scanning and audio logging creates a profile of users and their surroundings, which could be leveraged for targeted advertising, sold to third parties, or exploited in more malicious contexts.

For engineers, these findings underscore the importance of network segmentation and device isolation. Smart TVs should not be treated as trusted endpoints, particularly in environments where sensitive discussions or proprietary data are present. The reported behavior also challenges assumptions about offline devices, data collection can persist locally and transmit once connectivity is restored. This necessitates stricter controls over device permissions, such as disabling microphones and network scanning by default, and providing transparent opt-out mechanisms for users.

The analysis does not specify whether these issues are limited to specific LG models or firmware versions, but the scale of deployment, reportedly over 200 million devices, amplifies the potential impact. Engineers and IT teams should evaluate whether these risks justify removing such devices from sensitive networks or implementing additional monitoring to detect unauthorized data exfiltration. The lack of explicit user consent for these behaviors further complicates compliance with privacy regulations, particularly in regions with strict data protection laws.