Home

Description

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of network traffic, which could allow a network-adjacent attacker to intercept or modify encrypted communications.

PUBLISHED Reserved 2025-12-04 | Published 2025-12-15 | Updated 2025-12-15 | Assigner LY-Corporation




HIGH: 7.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Problem types

na

Product status

15.3 (custom) before 15.4
affected

References

hackerone.com/reports/2853445

cve.org (CVE-2025-14022)

nvd.nist.gov (CVE-2025-14022)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.