CVE-2018-12108: Dropbox Lepton

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in Dropbox Lepton 1.2.1. The validateAndCompress function in validation.cc allows remote attackers to cause a denial of service (SIGFPE and application crash) via a malformed file.

Affected products

• Dropbox Lepton: version 1.2.1 only

Published 2018-06-11. Last modified 2026-06-17.