CVE-2016-6236 The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg file.
MediumCVSS 5.5
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lepton project lepton | = 1.0 | No fix listed |
References
- [oss-security] 20160717 Re: multiple memory corruption issues in lepton mailing-list patch third-party-advisory
- github.com issue-tracking patch third-party-advisory