Dropbox · Dropbox Lepton · CVE-2017-8891
**Name of the Vulnerable Software and Affected Versions**
Dropbox Lepton version 1.2.1
**Description**
The issue allows for a denial of service (DoS) through a malformed lepton file, causing a segmentation fault (SEGV) and application crash. This occurs because the code fails to ensure the correct setup of a number of threads.
**Recommendations**
For Dropbox Lepton version 1.2.1, update to a newer version that addresses this issue to prevent denial of service attacks.