CVE-2018-20819

Name of the Vulnerable Software and Affected Versions: Dropbox Lepton version 1.2.1

Description: The issue is related to a missing check of header payloads in the decompression component, specifically in the io/ZlibCompression.cc file. This allows attackers to craft a jpg image file that can cause a denial of service, resulting in a heap-based buffer overflow and application crash, or possibly have other unspecified impacts.

Recommendations: For version 1.2.1, update to a newer version that includes a fix for the missing check of header payloads in the decompression component to prevent the heap-based buffer overflow and application crash.