CVE-2018-13434

CVE-2018-13434 describes an authentication bypass vulnerability in the LINE jp.naver.line application 8.8.0 for iOS. This flaw allows an attacker to bypass biometric (TouchID) validation by manipulating the LAContext return value to "true," effectively authenticating with an arbitrary fingerprint, though the vendor notes this is not considered a threat on non-jailbroken devices. With a CVSS score of 6.3 (Medium), the attack requires physical access (AV:P) but has high impact on confidentiality, integrity, and availability (C:H/I:H/A:H), with high attack complexity (AC:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.