CVE-2022-4104

all versions

A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, re

5.5MEDIUM

CVE-2022-26181

all versions

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/b

7.8HIGH

CVE-2018-20820

all versions

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because

5.5MEDIUM

CVE-2018-20819

all versions

io/ZlibCompression.cc in the decompression component in Dropbox Lepton 1.2.1 allows attackers to cause a denial of service (heap-b

7.8HIGH

CVE-2018-12108

all versions

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to caus

5.5MEDIUM

CVE-2017-8891

all versions

Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensure setup of

5.5MEDIUM

CVE-2017-7448

all versions

The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a

5.5MEDIUM

CVE-2016-6238

all versions

The write_ujpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-of-bou

5.5MEDIUM

CVE-2016-6237

all versions

The build_huffcodes function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause denial of service (out-o

5.5MEDIUM

CVE-2016-6236

all versions

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (o

5.5MEDIUM

CVE-2016-6235

all versions

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (s

5.5MEDIUM

CVE-2016-6234

all versions

The process_file function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (crash)

5.5MEDIUM

CVE-2012-1000

<= 1.1.3

Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inje

CVE-2012-0999

<= 1.1.3

SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL comman

CVE-2012-0998

<= 1.1.3

Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute

CVE-2011-3385

all versions

Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote