Medium severity5.5OSV Advisory· Published Apr 23, 2019· Updated Jun 17, 2026
CVE-2018-20820
CVE-2018-20820
Description
read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31.0, 1.1, 1.2, …+ 2 more
- (no CPE)range: 1.0, 1.1, 1.2, …
- cpe:2.3:a:dropbox:lepton:1.2.1:*:*:*:*:*:*:*
- (no CPE)range: = 1.2.1
Patches
Vulnerability mechanics
References
2- github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761nvdPatchThird Party Advisory
- github.com/dropbox/lepton/issues/111nvdExploitPatchThird Party Advisory
News mentions
0No linked articles in our index yet.