Unscored CVE-2016-6236 EUVD-2016-7166GHSA-cxxg-8gh7-rf4q

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-bou…

Published Feb 2, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

The setup_imginfo_jpg function in lepton/jpgcoder.cc in Dropbox lepton 1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg file.

References

https://github.com/dropbox/lepton/issues/26
[oss-security] 20160717 Re: multiple memory corruption issues in lepton mailing-list