Gamers Nexus teardown finds LG TVs inventorying the LAN they sit on

This scanning is part of how the product normally operates, not evidence of exploitation. Among the device classes the rooted sets identified were smartwatches, network switches, printers, 3D printers, servers and HVAC hardware ^[3], and firmware analysis showed the television could also survey nearby Wi-Fi networks, logging names, signal strength and channel ^[4]. In an office, that inventory describes a floor rather than a living room.

Where traffic goes is documented separately. One test set connected to numerous LG and advertising endpoints and repeatedly contacted the ACR infrastructure of Alphonso ^[6], the entity LG's advertising business operates through after LG took a controlling stake in 2021 ^[17]. Gamers Nexus estimated roughly 4GB of ACR-related data a month from a single television ^[7]. That is 48GB a year per panel, or 480GB a year from a ten-screen estate of lobby and meeting-room displays ^[1]. LG Channels requests could also reveal which channel was being watched ^[20].

Neither Gamers Nexus nor Malwarebytes reports having observed the LAN device inventory itself leaving the set. Malwarebytes describes that data as information that could help build a picture of the devices in a household and, combined with ACR data and advertising IDs, support detailed profiles ^[8]. So the discovery and the ACR egress are each documented; the link between them is inference at this stage.

The audio findings sit on the other side of the line. After taking control of test units, the researchers recorded through built-in microphones, USB webcams and remote-control microphones ^[9], and Malwarebytes reports capture continuing when the television appeared to be off ^[12]. One demonstration pulled the audio of a conference call passing through the television off the television itself ^[11]. Gamers Nexus frames this as what an attacker inherits after compromise, not as evidence that LG records private conversations ^[18].

That leaves placement. The researchers involved recommend disconnecting LG smart TVs from networks while the undisclosed vulnerabilities move through responsible disclosure ^[14], and isolating sets from sensitive home or business systems ^[21]. Malwarebytes recommends a separate IoT or guest network for televisions and turning UPnP off at the router ^[15]. For a boardroom panel or an executive's home office, the practical version of that advice is a VLAN the television cannot route out of.

Malwarebytes splits the findings into two categories: some concern LG's intended product behaviour, and others depend on vulnerabilities still under disclosure ^[19], and the product-behaviour category will still be there once LG fixes the second.