LY Corporation · Report #1701642
iOS group chat denial of service
Validstatus
lowseverity
$300bounty
42upvotes
29 Mar 2023disclosed
Summary
If an invalid E2EGgroupKey is shared within the group and a message encrypted with it is received, LINE iOS will crash, making it difficult to run the client. CVE-2022-41568 has been issued for this vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.