Descriptions

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

Severity

  • CVSSv3.1 Score: 3.4 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N)

Affected Versions

  • LINE client for Android before 15.6

Fix

  • LINE should be updated to latest version.

Reference

  • https://www.cve.org/CVERecord?id=CVE-2025-14019

Updated: