Live › vulnerability › CVE-2026-40661
The AMD Compressonator SDK has an out-of-bounds write triggered by a specially crafted DirectDraw Surface (DDS) image file. Opening such a file in a user or automated pipeline can corrupt heap memory or cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 15:22 UTC. All times on this page are UTC.
Teams that build or run tools using the AMD Compressonator SDK to process DDS textures, especially automated pipelines that accept DDS files from outside sources. Systems that never load untrusted DDS files are less exposed. The sources do not give affected version ranges.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated pipeline, potentially resulting in heap corruption or denial of service (DoS).
This page as .md · .json · in your agent: get_signal("CVE-2026-40661")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.