Line Corporation vulnerabilities
26 CVEs and advisories name Line Corporation as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-14023LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user inte
- CVE-2025-14022LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial
- CVE-2025-14021The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to exec
- CVE-2025-14020LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security To
- CVE-2025-14019LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure
- CVE-2025-11222Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via s
- CVE-2024-5739The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability.
- CVE-2024-1735A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authent
- CVE-2024-1143Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the leakage of user sessions and s
- CVE-2015-2968LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allo
- CVE-2015-0897LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack sinc
- CVE-2023-5554Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0.
- CVE-2023-38493Paths contain matrix variables bypass decorators
- CVE-2022-41568LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat.
- CVE-2022-29505Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege
- CVE-2022-22820Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipie
- CVE-2021-43795Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria
- CVE-2021-41011LINE client for iOS before 11.15.0 might expose authentication information for a certain service to external entities under certain conditio
- CVE-2021-38388Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the
- CVE-2021-36216LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.
- CVE-2021-36215LINE client for iOS 10.21.3 and before allows address bar spoofing due to inappropriate address handling.
- CVE-2021-36214LINE client for iOS before 10.16.3 allows cross site script with specific header in WebView.
- CVE-2019-16771Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in Armeria
- CVE-2019-6010Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service
- CVE-2019-6002Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitrary web script or HTML via unsp
- CVE-2018-0518LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s