Approved changes feed: RSS · Atom

cpe:2.3:a:ly_corporation:line_client_for_android:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLy Corporation (34e85f02-866b-5d89-b7f9-2d90cbcfd761)
ProductLine Client For Android (644d9f57-c5b2-5256-9108-33ab170ef494)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-16881 not_vulnerable 2026-09-16 04:32:56.583100 Details available
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profile could cause unintended code to execute with the application's privileges when a victim views that profile. A server-side mitigation has been deployed that also protects existing Android clients that have not been updated to version 26.7.2.
Published: 2026-08-04T05:05:34.448Z
Updated: 2026-08-04T18:57:11.045Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.