CVE-2022-4104: Lepton Project Lepton

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service.

Affected products

• Lepton Project Lepton: version 1.2 only

Published 2022-11-28. Last modified 2026-06-17.