RawTherapee vulnerabilities

Products

• RawTherapee 1

Latest RawTherapee CVEs

Newest publication first

1. CVE-2026-24808 A possible integer overflow vulnerability in RawTherapee/RawTherapee

   Published 2026-01-27

   High·CVSS 8.3 EPSS 0.14%

   Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc. This issue affects RawTherapee: through 5.11.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.