Skip to content
Sign in
6.9 Medium

CVE-2026-100493 An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS…

Description

An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process termination or limited disclosure of heap memory.

Affected products and versions

Product Affected versions Fixed in
AMD Compressionator SDK 4.6 earliest → < 4.6.0 4.6.0

Other CVEs of AMD Compressionator SDK

The 5 CVEs of AMD Compressionator SDK →
CVE-2026-40652 An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a… 5.2 Medium CVE-2026-40661 An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply… 5.2 Medium CVE-2026-40660 A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local… 5.2 Medium CVE-2026-40659 An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a… 5.1 Medium
Track this CVE