{"id":"CVE-2026-40652","kind":"vulnerability","aliases":["CVE-2026-40652"],"related":[],"title":"AMD Compressonator SDK: crafted TGA file leaks heap memory or crashes","description":"An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.","summary":"An out-of-bounds read in the AMD Compressonator SDK can be triggered by a specially crafted Truevision TGA image file. An attacker who supplies that file to a user or automated pipeline can read sensitive heap memory or cause a denial of service.","severity":"medium","cvss":5.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","c++","compressonator","image-processing","package"],"not_affected_if":["no-compressonator","trusted-input-only"],"how_to_check":"- Check whether the Compressonator SDK is present in your build or dependencies; the sources do not name affected versions, so `unknown` for exact range.\n- Look for pipelines that decode untrusted TGA files with Compressonator.","fix":null,"status":"open","published_at":"2026-11-03T15:17:39+00:00","first_seen_at":"2026-11-03T15:22:01+00:00","triaged_at":"2026-11-03T15:24:41+00:00","updated_at":"2026-11-03T15:24:41+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-03T15:24:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD Compressonator SDK: crafted TGA file leaks heap memory or crashes","impact":"medium","summary":"An out-of-bounds read in the AMD Compressonator SDK can be triggered by a specially crafted Truevision TGA image file. An attacker who supplies that file to a user or automated pipeline can read sensitive heap memory or cause a denial of service.","audience":"businesses","category":"package","nicknames":[],"who_cares":["compressonator","image-processing","amd","c++"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Sensitive heap memory is disclosed, or the process crashes.","analyst_note":"Find the affected and fixed Compressonator SDK versions in AMD's security bulletin, referenced from the NVD entry.","how_to_check":"- Check whether the Compressonator SDK is present in your build or dependencies; the sources do not name affected versions, so `unknown` for exact range.\n- Look for pipelines that decode untrusted TGA files with Compressonator.","plain_action":"","needs_analyst":true,"not_affected_if":["no-compressonator","trusted-input-only"],"who_is_affected":"Exposure requires that the SDK processes TGA files an attacker can supply, such as user uploads or files pulled into an automated image pipeline. Teams that do not use Compressonator or only handle trusted TGA files are unlikely to be affected. Affected versions are unknown from the sources.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000695,"input_tokens":4135,"output_tokens":562,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-40652':14A,17A 'access':88C 'adapt':98C 'advanc':95C 'allow':83C 'amd':1A,18B,33B,79C 'attack':48B,85C 'autom':57B,106C 'bound':29B,74C 'c':19B 'caus':65B 'compresson':2A,20B,34B,80C 'condit':76C 'content':116C 'could':82C 'craft':4A,42B,93C 'crash':11A 'cve':12A,15A 'denial':67B,118C 'disclosur':111C 'file':6A,46B,52B,100C 'graphic':97C 'heap':8A,62B,114C 'imag':22B,45B 'image-process':21B 'leak':7A 'local':87C 'memori':9A,63B,115C 'out-of-bound':26B,71C 'packag':24B 'pipelin':58B,107C 'potenti':108C 'process':23B 'raster':96C 'read':30B,60B,75C 'result':109C 'sdk':3A,35B,81C 'sensit':61B,113C 'servic':69B,120C 'special':41B,92C 'suppli':50B,90C 'tga':5A,44B,99C 'trigger':38B 'truevis':43B,94C 'user':55B,103C","nicknames":[],"mitigations":[],"who_affected":"Exposure requires that the SDK processes TGA files an attacker can supply, such as user uploads or files pulled into an automated image pipeline. Teams that do not use Compressonator or only handle trusted TGA files are unlikely to be affected. Affected versions are unknown from the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","c","compressonator","imageprocessing","medium","package"],"first_public_at":"2026-11-03T15:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-40652","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40652","severity":null,"published_at":"2026-11-03T15:17:39+00:00","modified_at":"2026-11-03T15:17:39+00:00","first_seen_at":"2026-11-03T15:22:01+00:00","fetched_at":"2026-11-03T15:22:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}