Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-14022

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the applic

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
LY-Corporation

Description

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of network traffic, which could allow a network-adjacent attacker to intercept or modify encrypted communications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LINE Corporation LINE client for iOS

  • 15.3 to < 15.4affected

References