Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged
Permalink CVE-2026-24808
created 2 months, 3 weeks ago
A possible integer overflow vulnerability in RawTherapee/RawTherapee

Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc. This issue affects RawTherapee: through 5.11.

Affected products

RawTherapee
  • =<5.11

Matching in nixpkgs

pkgs.rawtherapee

RAW converter and digital photo processing software

  • nixos-unstable 5.12
    • nixpkgs-unstable 5.12
    • nixos-unstable-small 5.12
  • nixos-25.11 5.12
    • nixpkgs-25.11-darwin 5.12

Package maintainers