Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-14020

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-disp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
LY-Corporation

Description

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by impersonating legitimate interfaces.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LINE Corporation LINE client for Android

  • 10.0 to < 14.20affected

References