Vulnerability Details CVE-2025-14022
LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of network traffic, which could allow a network-adjacent attacker to intercept or modify encrypted communications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.4%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2025-14022
-
cpe:2.3:a:linecorp:line:10.0.0
-
cpe:2.3:a:linecorp:line:10.0.1
-
cpe:2.3:a:linecorp:line:10.0.2
-
cpe:2.3:a:linecorp:line:10.1.0
-
cpe:2.3:a:linecorp:line:10.1.1
-
cpe:2.3:a:linecorp:line:10.16.3
-
cpe:2.3:a:linecorp:line:10.21.3
-
cpe:2.3:a:linecorp:line:11.0.0
-
cpe:2.3:a:linecorp:line:11.1.0
-
cpe:2.3:a:linecorp:line:11.10.0
-
cpe:2.3:a:linecorp:line:11.11.0
-
cpe:2.3:a:linecorp:line:11.12.0
-
cpe:2.3:a:linecorp:line:11.12.1
-
cpe:2.3:a:linecorp:line:11.13.0
-
cpe:2.3:a:linecorp:line:11.15.0
-
cpe:2.3:a:linecorp:line:11.16.0
-
cpe:2.3:a:linecorp:line:11.2.0
-
cpe:2.3:a:linecorp:line:11.3.0
-
cpe:2.3:a:linecorp:line:11.4.0
-
cpe:2.3:a:linecorp:line:11.4.1
-
cpe:2.3:a:linecorp:line:11.5.0
-
cpe:2.3:a:linecorp:line:11.5.1
-
cpe:2.3:a:linecorp:line:11.6.0
-
cpe:2.3:a:linecorp:line:11.6.1
-
cpe:2.3:a:linecorp:line:11.6.5
-
cpe:2.3:a:linecorp:line:11.7.0
-
cpe:2.3:a:linecorp:line:11.7.1
-
cpe:2.3:a:linecorp:line:11.8.0
-
cpe:2.3:a:linecorp:line:11.8.1
-
cpe:2.3:a:linecorp:line:11.8.2
-
cpe:2.3:a:linecorp:line:11.9.0
-
cpe:2.3:a:linecorp:line:13.16.0
-
cpe:2.3:a:linecorp:line:7.0.0
-
cpe:2.3:a:linecorp:line:7.1.3
-
cpe:2.3:a:linecorp:line:7.15
-
cpe:2.3:a:linecorp:line:8.0.2
-
cpe:2.3:a:linecorp:line:8.1.0
-
cpe:2.3:a:linecorp:line:8.1.1
-
cpe:2.3:a:linecorp:line:8.11.0
-
cpe:2.3:a:linecorp:line:8.11.1
-
cpe:2.3:a:linecorp:line:8.12.0
-
cpe:2.3:a:linecorp:line:8.12.1
-
cpe:2.3:a:linecorp:line:8.13.0
-
cpe:2.3:a:linecorp:line:8.14.5
-
cpe:2.3:a:linecorp:line:8.16.0
-
cpe:2.3:a:linecorp:line:8.16.1
-
cpe:2.3:a:linecorp:line:8.2.0
-
cpe:2.3:a:linecorp:line:8.2.1
-
cpe:2.3:a:linecorp:line:8.3.0
-
cpe:2.3:a:linecorp:line:8.3.1
-
cpe:2.3:a:linecorp:line:8.4.0
-
cpe:2.3:a:linecorp:line:8.4.1
-
cpe:2.3:a:linecorp:line:8.5.0
-
cpe:2.3:a:linecorp:line:8.5.1
-
cpe:2.3:a:linecorp:line:8.5.2
-
cpe:2.3:a:linecorp:line:8.6.0
-
cpe:2.3:a:linecorp:line:8.6.1
-
cpe:2.3:a:linecorp:line:8.7.0
-
cpe:2.3:a:linecorp:line:8.8.0
-
cpe:2.3:a:linecorp:line:8.9.0
-
cpe:2.3:a:linecorp:line:9.1.0
-
cpe:2.3:a:linecorp:line:9.12.0
-
cpe:2.3:a:linecorp:line:9.13.0
-
cpe:2.3:a:linecorp:line:9.15.0
-
cpe:2.3:a:linecorp:line:9.15.1
-
cpe:2.3:a:linecorp:line:9.16.0
-
cpe:2.3:a:linecorp:line:9.16.1
-
cpe:2.3:a:linecorp:line:9.16.5
-
cpe:2.3:a:linecorp:line:9.16.6
-
cpe:2.3:a:linecorp:line:9.18.0
-
cpe:2.3:a:linecorp:line:9.18.1
-
cpe:2.3:a:linecorp:line:9.19.0
-
cpe:2.3:a:linecorp:line:9.2.0
-
cpe:2.3:a:linecorp:line:9.2.1
-
cpe:2.3:a:linecorp:line:9.5.0
-
cpe:2.3:a:linecorp:line:9.5.1
-
cpe:2.3:a:linecorp:line:9.6.5
-
cpe:2.3:a:linecorp:line:9.7.0
-
cpe:2.3:a:linecorp:line:9.7.1
-
cpe:2.3:a:linecorp:line:9.8.0