CVE-2026-1464CWE-190

A possible integer overflow vulnerability in RawTherapee/RawTherapee

Medium · published January 27, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager (app/src/main/java/org/apache/commons/compress/archivers/tar modules). This vulnerability is associated with program files TarUtils.Java.

This issue affects AppManager: before 4.0.4.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Amber
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2026-01-27T08:18Z
EPSS history
Timeline
  • 27 JAN 08:18Z
    A possible integer overflow vulnerability in RawTherapee/RawTherapee
    cvelistv5