Vulnerabilities > CVE-2022-4104 - Infinite Loop vulnerability in Lepton Project Lepton 1.2

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
lepton-project
CWE-835

Summary

A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service.

Vulnerable Configurations

Part Description Count
Application
Lepton_Project
1