CVE-2025-14020 MEDIUM

CVE-2025-14020

Vendor Line Corporation
Product LINE client for Android
Published December 15, 2025
Last update December 15, 2025

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by impersonating legitimate interfaces.

Key dates

02Disclosure timeline

December 15, 2025 CVE published
December 15, 2025 Record updated