CVE-2018-20819
NONE EPSS 57.8%
Published Apr 23, 20197y ago · Modified Jun 17, 20262w ago
Published Apr 23, 2019 7y ago
Last Modified Jun 17, 2026 2w ago
Description
io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact by crafting a jpg image file. The root cause is a missing check of header payloads that may be (incorrectly) larger than the maximum file size.
Threat Intelligence
EPSS Exploit Probability
57.8% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available
Weaknesses 1
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| dropbox | lepton | 1.2.1 | any |
References 1
- github.com https://github.com/dropbox/lepton/issues/112
Remediation
- github.com https://github.com/dropbox/lepton/issues/112