CVE-2025-14023CWE-451

CVE-2025-14023

Low · published December 15, 2025

CVSS v3.1

3.1

EPSS

Percentile

6.8

In the wild

Unconfirmed

What it is

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions.

The record

Technical detail

CVSS v3.1: 3.1 · LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00176 · 6.8th percentile
Weakness: CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published: 2025-12-15T12:15Z

Affected products (1)

Product	Versions	Fixed in
linecorp/line	< 15.19.0	15.19.0

References (2)

https://hackerone.com/reports/3260386 · [email protected]https://hackerone.com/reports/3260386 · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

15 DEC 06:45Z
LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could…
cvelistv5