6.9
Moyenne
CVE-2026-100493 An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS…
Description
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process termination or limited disclosure of heap memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD Compressionator SDK 4.6 | premières → < 4.6.0 | 4.6.0 |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de AMD Compressionator SDK
Les 5 CVE de AMD Compressionator SDK →
CVE-2026-40652
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…
5.2
Moyenne
CVE-2026-40661
An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply…
5.2
Moyenne
CVE-2026-40660
A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local…
5.2
Moyenne
CVE-2026-40659
An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a…
5.1
Moyenne