CVE-2022-22820

Published: Jan 20, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.

Affected (1)

Products: Linecorp: Line

Linecorp

1 product

Line

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linecorp Line	Before 7.4.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://hackerone.com/reports/1357400

Source: dl_cve@linecorp.com

Permissions Required

https://hackerone.com/reports/1357400

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.