LG Webos

PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction

The public API error causes for the attacker to be able to bypass API access control.

webOS TV Emulator privilege escalation vulnerability

Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service

Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service

Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint

V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege