Descriptions

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by impersonating legitimate interfaces.

Severity

  • CVSSv3.1 Score: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)

Affected Versions

  • LINE client for Android before 14.20

Fix

  • LINE should be updated to latest version.

Reference

  • https://www.cve.org/CVERecord?id=CVE-2025-14020

Updated: