Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-14020 EUVD-2025-203348GHSA-p444-369q-pjgr

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security T…

Published Dec 15, 2025 · Updated Dec 15, 2025 · Assigned by LY-Corporation

Description

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by impersonating legitimate interfaces.

Affected products

VendorProductAffectedFixed
LINE LINE client for Android 10.0 – < 14.20 14.20

References