# CVE-2025-14022: LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in…

Source: https://junglewise.ai/threats/cve-2025-14022-line-client-for-ios-prior-to-15-4-allows-man-in-the-middle  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-15  
License: CC BY 4.0 with a link back

CVE-2025-14022 · Severity: high · CVSS 7.7 · Published 2025-12-15

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of network traffic, which could allow a network-adjacent attacker to intercept or modify encrypted communications.

Technologies: [Linecorp Line](https://junglewise.ai/threats/technologies/line). Vendors: [Linecorp](https://junglewise.ai/threats/vendors/linecorp).

## Quick answers

**Is CVE-2025-14022 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-14022 being exploited in the wild.

**How severe is CVE-2025-14022?** High severity, with a CVSS score of 7.7, published 15 December 2025.

**Which products and versions are affected?** Linecorp Line. The advisory does not name versions.

**Is there a fix for CVE-2025-14022?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-14022?** Check whether you run Linecorp Line. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Linecorp Line

## Related threats

- [LINE client for iOS denial of service in in-app browser](https://junglewise.ai/threats/cve-2026-3861-line-client-for-ios-denial-of-service-in-in-app-browser)
- [LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the…](https://junglewise.ai/threats/cve-2025-14023-line-client-for-ios-prior-to-15-19-allows-ui-spoofing-due-to)
- [The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could…](https://junglewise.ai/threats/cve-2025-14021-the-in-app-browser-in-line-client-for-ios-versions-prior-to-14-14)
- [LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in the in-app browser where the…](https://junglewise.ai/threats/cve-2025-14020-line-client-for-android-versions-prior-to-14-20-contains-a-ui)
- [LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific…](https://junglewise.ai/threats/cve-2025-14019-line-client-for-android-versions-from-13-8-to-15-5-is-vulnerable)