CVE-2025-14022: line before 15.4.0 (exclusive); +1 more affected products

Affected technology

line · before 15.4.0 (exclusive)
linecorp

LINE client for iOS · 15.3 to before 15.4
LINE Corporation

Description’s affected range: prior to 15.4

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

A network-adjacent attacker could intercept or modify encrypted communications. Vendor/CNA’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality and integrity impact as high; availability impact as low. NVD’s CVSS 3.1 assessment (base score 6.8/10) rates confidentiality and integrity impact as high; availability impact as none.