TI-2019-04299 Aliases CVE-2019-6010 GHSA-c2jq-5jwr-rc4r

Integer overflow in LINE

LOW 38CWE-190Published 2019-09-19 · Updated 2024-08-04

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.

Summary

Integer overflow vulnerability in LINE(Android) from 4.4.0 to the version before 9.15.1 allows remote attackers to cause a denial of service (DoS) condition or execute arbitrary code via a specially crafted image.

Why it matters now

EPSS 0.01728 77th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
LINE Corporation	LINE(Android)	from 4.4.0 to the version before 9.15.1	—	No fix listed	CNA

LINE(Android) VendorLINE Corporation Affected from 4.4.0 to the version before 9.15.1 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:linecorp:line::::::android::*	4.4.0 to before 9.15.1	Vulnerable	Linecorp

cpe:2.3:a:linecorp:line:*:*:*:*:*:android:*:* Versions 4.4.0 to before 9.15.1 Vulnerable ·Linecorp

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2019-6010
2026-10-03 Alias added: GHSA-c2jq-5jwr-rc4r

References

Advisory 1

http://jvn.jp/en/jp/JVN97845465/index.html

Other 1

https://play.google.com/store/apps/details?id=jp.naver.line.android&hl=en

TI-2024-01613 Improper authentication in LINE Corporation Armeria CVSS 3.1CRITICAL 9.1
TI-2023-05112 Improper certificate validation in LINE client for iOS CVSS 3.1CRITICAL 9.8
TI-2024-01060 Cross-site scripting in LINE Corporation Central Dogma CVSS 3.1CRITICAL 9.3
TI-2023-19873 Paths contain matrix variables bypass decorators CVSS 3.1HIGH 7.5
TI-2022-19973 LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. CVSS 3.1HIGH 7.5
TI-2021-15992 Missing authorization in LINE Corporation Central Dogma CVSS 3.1HIGH 8.8

See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences