Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking

What happened?

A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the screen. Known online as log4j, he started after the set kept showing ads that seemed oddly specific to his household. He says the Tizen firmware was AES-encrypted, so keys were not available without opening the hardware. He used zero-day flaws to open a root shell and documented the tracking features with code screenshots. Samsung has not publicly answered. The findings have not been reproduced on an unmodified television.

Key details

• The TV firmware includes automatic content recognition, screenshot handling, geolocation, network mapping, targeted advertising, and user profile building.
• An always-on voice component named csapi-tv-service-alwaysonvoice counts audio events such as a dog barking or a baby crying.
• The TV can use a connected soundbar or Bluetooth device microphone for audio events even if the set lacks a built-in microphone.
• A support component called rmdemon allows staff to reach the device for short diagnostics.
• Texas Attorney General sued Samsung and others over automated content recognition without informed consent and reached an agreement requiring express consent for ACR data collection in Texas.
• Log4j claims data is shared with Samsung and roughly 400 partners, and Samsung's privacy page acknowledges third parties may receive device details and ad interaction records.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.