Live › vulnerability › CVE-2026-100493
AMD Compressonator SDK's DDS RGB888 loader has an integer overflow that allocates too little heap memory when given a crafted DDS file. The resulting out-of-bounds read can terminate the process or disclose limited heap memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:21 UTC. All times on this page are UTC.
Applications that use the AMD Compressonator SDK to load DDS images, especially where the files come from untrusted sources. Systems that never load DDS files through this SDK can skip it. The sources do not list affected versions.
No product ranges from the sources yet.
unknown for version rangesNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process termination or limited disclosure of heap memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-100493")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.