PT-2022-15696 · Line · Line For Windows

Published 2022-01-20 · Updated 2023-08-08 · CVE-2022-22820

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LINE for Windows versions prior to 7.4

Description The issue arises from the lack of media file checks before rendering, allowing an attacker to cause abnormal CPU consumption for the message recipient by sending a specially crafted gif image.

Recommendations For versions prior to 7.4, update to version 7.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of gif images from untrusted sources until the update is applied.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-22820

Affected Products

Line For Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-22820 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22820 · Vendor Advisory
• https://hackerone.com/reports/1357400 · Note
• https://t.me/cibsecurity/35912 · Telegram Post
• https://t.me/cvenotify/25708 · Telegram Post