CVE-2026-40652
Deferred Deferred - Pending Action

Out-of-Bounds Read in AMD Compressonator SDK

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Advanced Micro Devices Inc.

Description
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-40652
EUVD
EUVD-2026-115879

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd compressonator_sdk *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds read in the AMD Compressonator SDK. It occurs when processing specially crafted TGA image files. An attacker with local access could exploit this to read sensitive heap memory or cause a denial of service.

Detection Guidance

This vulnerability involves an out-of-bounds read in AMD Compressonator SDK when processing TGA files. Detection requires analyzing files processed by the SDK for malformed TGA inputs. No specific commands are provided in the context to detect this vulnerability.

Impact Analysis

If exploited, this flaw could allow disclosure of sensitive memory contents or crash applications using the AMD Compressonator SDK. Users processing untrusted TGA files may be affected.

Mitigation Strategies

Immediate mitigation steps include updating AMD Compressonator SDK to the latest patched version, restricting access to systems using the SDK, and validating all TGA files processed by the SDK to ensure they are not malformed. Avoid opening untrusted TGA files in applications using this SDK.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40652. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...