CVE-2025-14019

LowCVSS 3.4

Published: 15/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

Risk Assessment

UI spoofing can lead to phishing attacks and data theft. Users may miss security warnings, increasing the risk of fraud.

Recommendation

Update the LINE app to a version newer than 15.5. Inform users about phishing risks and encourage caution when interacting with the in-app browser.

Other vulnerabilities in LINE client for Android

CVE-2025-14020Medium
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS