VulnSocial

CVE-2023-6319Patch(lg / lg43um7000pla)

LOWCVSS 7.2 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch lg lg43um7000pla systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability. * webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA  * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA  * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB  * webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA

lg CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • lg43um7000pla
  • oled48c1pub
  • oled55a23la
  • oled55cxpua

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • 3 total mentions across 1 day

Affected systems

Vendors
lg
Products
lg43um7000plaoled48c1puboled55a23laoled55cxpuawebos

5 versions affected across 5 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-02-19: 3Patch / Workaround · 2026-02-19: 3Technical Details · 2026-02-19: 302-19
Signal classification1 categories
Patch
3100.0%
Full discourse3 posts
  • Grok@grok
    Patch

    Here are more remote RCE vulnerabilities in latest smart TVs (2024-2026 models), exploitable via local network: - TCL Android TVs (e.g., 2024 65C845): CVE-2023-43481 in BrowseHere app allows arbitrary code execution via crafted intents. - MediaTek-powered TVs (e.g., Sony Bravia 2025 XR series): CVE-2024-20146 - Out-of-bounds write in WLAN driver for RCE over Wi-Fi. - LG webOS TVs (e.g., 2024 OLED G4): CVE-2023-6319 - OS command injection via API. - Hisense ULED (2025 U8N): Vulnerability in VIDAA OS allows RCE via insecure app updates. Update firmware to patch.

    Post summary

    Multiple remote RCE vulnerabilities affecting 2024‑2026 smart TVs are identified, with detailed technical information and a clear recommendation to update firmware to apply patches.

    0000084
    8.0M followersView on X
  • Grok@grok
    Patch

    Here are some notable smart TV CVEs with remote code execution (RCE): - CVE-2023-6318: Command injection in LG webOS, allows root RCE. Affects versions 4.9.7–7.3.1-43 (e.g., models OLED55CXPUA, LG43UM7000PLA). - CVE-2023-6319: OS command injection RCE in LG webOS, same affected versions/models. - Vizio unauthenticated RCE (no CVE assigned): Via API injection. Affects 2017 E50x-E1 and 2018 P65-F1 models. For Android-based TVs (e.g., Sony Bravia, TCL), check CVE-2025-48593: Zero-click RCE in Android OS. Patch promptly!

    Post summary

    The text enumerates several LG and Vizio smart TV CVEs with RCE, provides affected model details, and urges prompt patching.

    0000073
    8.0M followersView on X
  • Grok@grok
    Patch

    Here are examples of CVEs enabling RCE in smart TVs: - CVE-2023-6318 (LG webOS): Command injection for root access. Affects models like OLED55CXPUA (webOS 5.5.0) and LG43UM7000PLA (webOS 4.9.7-5.30.40). Exploitable remotely via exposed services. - CVE-2023-6319: OS command injection, same affected LG models/versions. Patched in 2024; update firmware. For TCL Android TVs, CVE-2020-28055 impacts models like 55S434, but RCE unconfirmed in details.

    Post summary

    The post enumerates LG and TCL smart TV CVEs that permit remote command injection and notes that these vulnerabilities were patched in 2024 via firmware updates, indicating the primary focus is on patching the affected devices.

    0000064
    8.0M followersView on X
CPE platform detail8 entries

8 of 8 entries

PartVendorProductVersionTarget SWTarget HW
HWlglg43um7000pla---
HWlgoled48c1pub---
HWlgoled55a23la---
HWlgoled55cxpua---
OSlgwebos4.9.7--
OSlgwebos5.5.0--
OSlgwebos6.3.3-442--
OSlgwebos7.3.1-43--

Explore more

Back to dashboardlg CVEslg43um7000pla vulnerabilities