CVE-2018-20820: Dropbox Lepton

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.

Affected products

• Dropbox Lepton: version 1.2.1 only

Published 2019-04-23. Last modified 2026-06-17.