Integer overflow in Rawtherapee

CVE-2026-24808

Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc. This issue affects RawTherapee: through 5.11.

Vulnerability class: Integer Overflow

EPSS: 0.001 (2.9th percentile) — read the EPSS interpretation.