5.2
Medium
CVE-2026-40652 An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…
Description
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Compressionator SDK | Versions not published |
Other CVEs of AMD Compressionator SDK
The 5 CVEs of AMD Compressionator SDK →
CVE-2026-100493
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS…
6.9
Medium
CVE-2026-40661
An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply…
5.2
Medium
CVE-2026-40660
A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local…
5.2
Medium
CVE-2026-40659
An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…
5.1
Medium