CVE-2018-20820

Published April 23rd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.

dropbox/lepton

Lepton is a tool and file format for losslessly compressing JPEGs by an average of 22%.

GitHub