UI Spoofing Vulnerability in LINE Client for Android

CVE-2025-14020

What is CVE-2025-14020?

The LINE Client for Android prior to version 14.20 contains a significant UI spoofing vulnerability within its in-app browser. This flaw arises from the failure to properly re-display the full-screen security Toast notification when users transition back from other applications. This oversight can be exploited by attackers to perform phishing attacks, as they could potentially impersonate legitimate interfaces, misleading users into providing sensitive information.

References