Known Vulnerabilities for Lepton by Dropbox
Listed below are 6 of the newest known vulnerabilities associated with "Lepton" by "Dropbox".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-26181 json | Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lep... | 7.8 - HIGH | 2022-02-28 | 2022-03-09 |
| CVE-2018-20820 json | read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash bec... | 5.5 - MEDIUM | 2019-04-23 | 2019-04-24 |
| CVE-2018-20819 json | io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (h... | 7.8 - HIGH | 2019-04-23 | 2020-08-24 |
| CVE-2018-12108 json | An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to... | 5.5 - MEDIUM | 2018-06-11 | 2018-07-30 |
| CVE-2017-8891 json | Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure set... | 5.5 - MEDIUM | 2017-05-10 | 2019-10-03 |
| CVE-2017-7448 json | The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to ca... | 5.5 - MEDIUM | 2017-04-05 | 2017-04-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Dropbox | Lepton | 1.2.1 |