# CVE-2025-14019: LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific…

Source: https://junglewise.ai/threats/cve-2025-14019-line-client-for-android-versions-from-13-8-to-15-5-is-vulnerable  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-15  
License: CC BY 4.0 with a link back

CVE-2025-14019 · Severity: low · CVSS 3.4 · Published 2025-12-15

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

Technologies: [Linecorp Line](https://junglewise.ai/threats/technologies/line). Vendors: [Linecorp](https://junglewise.ai/threats/vendors/linecorp).

## Quick answers

**Is CVE-2025-14019 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-14019 being exploited in the wild.

**How severe is CVE-2025-14019?** Low severity, with a CVSS score of 3.4, published 15 December 2025.

**Which products and versions are affected?** Linecorp Line. The advisory does not name versions.

**Is there a fix for CVE-2025-14019?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-14019?** Check whether you run Linecorp Line. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Linecorp Line

## Related threats

- [LINE client for iOS denial of service in in-app browser](https://junglewise.ai/threats/cve-2026-3861-line-client-for-ios-denial-of-service-in-in-app-browser)
- [LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the…](https://junglewise.ai/threats/cve-2025-14023-line-client-for-ios-prior-to-15-19-allows-ui-spoofing-due-to)
- [LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in…](https://junglewise.ai/threats/cve-2025-14022-line-client-for-ios-prior-to-15-4-allows-man-in-the-middle)
- [The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could…](https://junglewise.ai/threats/cve-2025-14021-the-in-app-browser-in-line-client-for-ios-versions-prior-to-14-14)
- [LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the…](https://junglewise.ai/threats/cve-2025-14020-line-client-for-android-versions-prior-to-14-20-contains-a-ui)