Live › vulnerability › CVE-2026-40659
The AMD Compressonator SDK has an integer overflow when parsing DirectDraw Surface (DDS) image files. A local attacker who supplies a specially crafted DDS file can crash the program, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:22 UTC. All times on this page are UTC.
Teams that run the AMD Compressonator SDK to process DDS texture files, especially where those files come from untrusted or unknown sources. The attacker needs local access to supply the file, so systems that only process trusted assets are lower risk. The sources do not list affected versions.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file, potentially resulting in denial of service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-40659")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.