CVE-2025-14020 — LINE Corporation / LINE client for Android

CVE-2025-14020

LINE Corporation / LINE client for Android PUBLISHED

Description (CNA)

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by impersonating legitimate interfaces.

Affected (CNA)

Vendor / product	Versions
LINE Corporation / LINE client for Android	affected 10.0 before 14.20

CWE

No CWE identifiers supplied.

References

https://hackerone.com/reports/2547989

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.