CVE-2025-14019

Medium · 4.7

CVSS

4.7

EPSS

0.2%

Published

Dec 15, 2025

CISA due date

—

The record

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

Affected packages

Ecosystem	Package	Introduced	Fixed