CVE-2026-24808
A possible integer overflow vulnerability in RawTherapee/RawTherapee
Summary
A possible integer overflow vulnerability in RawTherapee/RawTherapee
Original description
The description as published by the source.
Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc.
This issue affects RawTherapee: through 5.11.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-24808 rawtherapee
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com