LG smart TVs log audio in standby, scan home networks, investigation finds

A sweeping 135-minute investigation published on Sunday by hardware channel Gamers Nexus, conducted alongside Level1Techs and independent security researchers, has revealed that LG smart TVs running webOS can record microphone audio while in standby mode, scan home networks for unrelated devices, and upload stored data to company servers once an internet connection is restored.

The investigation tested retail LG OLED models including the flagship G5, using Wireshark packet captures and firmware analysis to document the televisions' behavior. LG had not responded to the findings as of publication time across multiple outlets.martincid+3

Always Listening, Even When "Off"

During controlled bench tests, researchers found that the TVs captured clear microphone audio while the screen appeared to be powered down in standby mode. When the team physically disconnected a test unit from its Ethernet cable, the television continued saving voice input locally. Once network access was restored, it transmitted the stored files to external servers.appleinsider+3

Spoken phrases were transcribed into plain-text logs on the device itself, with test prompts appearing in readable text in the television's memory. Some outlets, including Malwarebytes and IBTimes, noted that the audio capture demonstrations required researchers to first gain control of the test units, drawing a distinction between LG's intended product behavior and what an attacker could do after exploiting vulnerabilities.malwarebytes+3

Mapping the Household

Beyond audio, the investigation documented the TVs actively scanning local networks to identify smartphones, smartwatches, PCs, printers, and other connected hardware. The sets also cataloged the names and signal strengths of neighboring Wi-Fi networks along with location-adjacent data, effectively mapping each household's connected environment.cybersecuritynews+3

This data feeds into LG Ad Solutions, the company's targeted advertising arm. The division claims access to 363 million "secondary addressable devices" in the United States — hardware that does not belong to LG but shares a network with an LG television. Julian Zilberbrand, global head of data solutions at LG Ad Solutions, said in a 2025 interview: "At LG, we know who's in the LG household. We know which devices are there".allaboutcookies+1

The TVs also run Automatic Content Recognition, which fingerprints on-screen content across all inputs, including HDMI — meaning displays in hospitals, hotels, and offices could theoretically be swept into the same data pipeline.cyberinsider+1

Vulnerabilities and Recommendations

Researchers additionally uncovered remote code execution vulnerabilities in webOS that are currently moving through responsible disclosure with LG. No firmware update addressing the audio collection behavior has been announced.martincid+2

The team's recommendation was blunt: disconnect LG televisions from the internet entirely and route streaming through an external device such as an Apple TV ↗ 5.31% or Roku ↗ 1.50% box. For users who keep their TVs connected, disabling ACR, viewing-information collection, and personalized advertising through the settings menu can limit — but not eliminate — data collection.malwarebytes+3