Man-in-the-Middle Vulnerability in LINE Client for iOS

CVE-2025-14022

What is CVE-2025-14022?

The LINE client for iOS prior to version 15.4 has a vulnerability that allows man-in-the-middle attacks due to inadequate SSL/TLS certificate validation in an integrated financial SDK. This security flaw disrupts the application's network processing, effectively disabling server certificate verification for a significant portion of its network traffic. As a consequence, an attacker situated on the same network could intercept or modify encrypted communications, posing serious security risks for users relying on this application for financial transactions.

References