CVE-2016-1156

Severity: medium (CVSS 5.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-02-19 · updated 2026-06-17
Weakness: CWE-20

Description

LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash) via a crafted post that is mishandled when displaying a Timeline.

Affected products

LINE Corporation LINE client for iOS: through 4.3.1; through 4.3.0.724

References

http://jvn.jp/en/jp/JVN46044093/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000029
http://linecorp.com/ja/security/article/53
http://jvn.jp/en/jp/JVN46044093/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2016-000029
http://linecorp.com/ja/security/article/53

Get alerted when CVE-2016-1156 or the next vulnerability affects your stack