TV Maker TCL Denies Back Door, Promises Better Process

The Security Ledger reports that researchers discovered two serious vulnerabilities in TCL Android-based smart TVs (CVE-2020-27403 and CVE-2020-28055) that allowed unauthenticated browsing of the TV OS and local read/write access to vendor directories; TCL issued a patch for one flaw and committed to patching the other while denying any secret backdoors but acknowledging remote diagnostic/maintenance APKs that can operate device functions when initiated by users. The report highlights which models are affected, notes that some fixes were silently applied via APK updates, and raises broader concerns about privacy and supply-chain risk from consumer devices manufactured or sourced in China.