CVE-2016-6237

CVE-2016-6237 describes an out-of-bounds write vulnerability in the build_huffcodes function of Dropbox Lepton 1.0, affecting the lepton_project lepton software. This medium-severity vulnerability (CVSS 5.5) can be triggered by a remote attacker providing a crafted JPEG file, leading to a denial-of-service condition. While the attack requires user interaction (UI:R), its complexity is low (AC:L). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.