24 matches found
CVE-2026-16881
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
CVE-2026-16881
The LINE Android app (before 26.7.2) contains a vulnerability in the profile rendering component where externally supplied script content embedded in profile templates is not adequately validated or sandboxed. This can allow crafted profile content to execute arbitrary code with the app’s privile...
CVE-2026-16881
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
EUVD-2026-52574
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
CVE-2026-16881
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
CVE-2026-16881: Undefined Security Weakness
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
CVE-2025-14020
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...
CVE-2025-14020
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...
CVE-2025-14019
LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks...
CVE-2025-14020
CVE-2025-14020 affects the LINE client for Android, prior to version 14.20. The issue is a UI spoofing vulnerability in the in-app browser: when users switch away from the app and return, the full-screen security toast notification is not reliably re-displayed, which can enable attackers to condu...
CVE-2025-14020
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...
EUVD-2025-203348
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...
PT-2025-51204
LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the full-screen security Toast notification is not properly re-displayed when users return from another application, potentially allowing attackers to conduct phishing attacks by...
LINE client for Android 安全漏洞
LINE client for Android is an instant messaging application by South Korean company LINE. A security vulnerability exists in LINE client for Android prior to version 14.20, which originates from in-app browser UI spoofing and may lead to phishing attacks...
CVE-2025-61114: Improper Access Control
2nd Line Android App version v1.2.92 and before package name com.mysecondline.app, developed by AutoBizLine, Inc., contains an improper access control vulnerability in its authentication mechanism. The server only validates the first character of the usertoken, enabling attackers to brute force...
EUVD-2019-15578
Malware in sbrugna...
CVE-2019-6010
Integer overflow vulnerability in LINEAndroid from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service DoS condition or execute arbitrary code via a specially crafted image...
PT-2023-10315 · Line · Line For Android +1
Name of the Vulnerable Software and Affected Versions: LINE@ for Android version 1.0.0 LINE@ for iOS version 1.0.0 Description: The issue allows for a man-in-the-middle MITM attack due to the application's acceptance of non-SSL/TLS communications. This enables an attacker to invoke any API from a...
LY Corporation: Path traversal in ZIP extract routine on LINE Android
@kanytu discovered that LINE Keepa file storage service in the LINE App contains an unsafe unzipping pattern, which can potentially be exploited to launch Path traversal attack. The reporter proved that it can lead to overwriting files in the LINE app's private folders under certain conditions by...
CVE-2019-6010
Integer overflow vulnerability in LINEAndroid from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service DoS condition or execute arbitrary code via a specially crafted image...