← All advisories

High severityOSV Advisory· Published Jan 27, 2026· Updated Apr 15, 2026

CVE-2026-24808

CVE-2026-24808

Description

Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc.

This issue affects RawTherapee: through 5.11.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

RawTherapee/RawtherapeeOSV2 versions
5.0-gtk3, 5.0-r1-gtk3, 5.10, …+ 1 more
- (no CPE)range: 5.0-gtk3, 5.0-r1-gtk3, 5.10, …
- (no CPE)range: <=5.11

Patches

Vulnerability mechanics

References

1

github.com/RawTherapee/RawTherapee/pull/7359nvd

News mentions

0

No linked articles in our index yet.