CVE-2018-12108

Published June 11th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed file.

dropbox/lepton

Lepton is a tool and file format for losslessly compressing JPEGs by an average of 22%.

GitHub