CVE-2025-14020

MediumCVSS 5.4

Published: 15/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Risk Assessment

Attackers can exploit this to conduct phishing attacks by impersonating legitimate interfaces, potentially leading to credential theft or other sensitive information disclosure.

Recommendation

Update LINE client for Android to version 14.20 or later, which includes a fix for this vulnerability.

Other vulnerabilities in LINE client for Android

CVE-2025-14019Low
LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

Original NVD description (English source)

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by impersonating legitimate interfaces.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS