{"id":"CVE-2022-22820","aliases":["EUVD-2022-27959","GHSA-mp4c-vqqf-2qxg"],"status":"published","title":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause...","description":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00837,"percentile":0.58014,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-400"],"published":"2022-01-20T11:47:43Z","modified":"2026-06-17T04:29:05Z","products":[{"vendor":"line corporation","product":"line for windows"},{"vendor":"linecorp","product":"line"}],"references":[{"url":"https://hackerone.com/reports/1357400","tags":["x_refsource_MISC","x_transferred","Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22820"},{"url":"https://github.com/advisories/GHSA-mp4c-vqqf-2qxg"}],"sources":{"cve":[{"id":"CVE-2022-22820","description":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.","status":"published","published":"2022-01-20T11:47:43Z","modified":"2024-08-03T03:21:49.159Z","updated_at":"2026-11-02T14:34:26.645563Z"}],"euvd":[{"id":"EUVD-2022-27959","description":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.","status":"published","published":"2022-01-20T11:47:43Z","modified":"2024-08-03T03:21:49Z","updated_at":"2026-11-03T03:25:52.201883Z"}],"ghsa":[{"id":"GHSA-mp4c-vqqf-2qxg","title":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause...","description":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.","status":"published","published":"2022-01-21T00:00:47Z","modified":"2023-08-17T05:01:40Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:54:45.250925Z"}],"nvd":[{"id":"CVE-2022-22820","description":"Due to the lack of media file checks before rendering, it was possible for an attacker to cause abnormal CPU consumption for message recipient by sending specially crafted gif image in LINE for Windows before 7.4.","status":"published","published":"2022-01-20T12:15:08.727Z","modified":"2026-06-17T04:29:05.903Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:11.52734Z"}]}}
