CVE-2022-26181: Dropbox Lepton

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/bitops.cc:108.

Affected products

• Dropbox Lepton: version 1.2.1 only

Published 2022-02-28. Last modified 2026-06-17.