CVE-2022-4104

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

VendorProductVersions
n/aDropbox Lepton1.2 and current development build

References

Timeline

Published
Nov 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-410408.8Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-410427.4Visual Studio Code Information Disclosure VulnerabilityCVE-2022-410433.3Microsoft Office Information Disclosure VulnerabilityCVE-2022-410448.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-410457.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-410478.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-410488.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-410495.4Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2022-41055.4A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attacCVE-2022-410507.8Windows Extensible File Allocation Table Elevation of Privilege VulnerabilityCVE-2022-410517.8Azure RTOS GUIX Studio Remote Code Execution VulnerabilityCVE-2022-410527.8Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-4104: Medium severity, CVSS 5.5 | Vulnix