{"id":"CVE-2026-40661","kind":"vulnerability","aliases":["CVE-2026-40661"],"related":[],"title":"AMD Compressonator SDK: crafted DDS file can corrupt heap or crash","description":"An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated pipeline, potentially resulting in heap corruption or denial of service (DoS).","summary":"The AMD Compressonator SDK has an out-of-bounds write triggered by a specially crafted DirectDraw Surface (DDS) image file. Opening such a file in a user or automated pipeline can corrupt heap memory or cause a denial of service.","severity":"medium","cvss":5.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-compressonator","image-processing","package","texture-pipelines"],"not_affected_if":["no-untrusted-dds-input"],"how_to_check":"- Check whether the AMD Compressonator SDK is installed or linked into your build or image-processing pipeline.\n- Confirm the installed version against the affected range in the NVD entry for CVE-2026-40661: unknown from the sources.","fix":null,"status":"open","published_at":"2026-11-03T15:17:39+00:00","first_seen_at":"2026-11-03T15:22:02+00:00","triaged_at":"2026-11-03T15:24:37+00:00","updated_at":"2026-11-03T15:24:37+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-03T15:24:37Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD Compressonator SDK: crafted DDS file can corrupt heap or crash","impact":"medium","summary":"The AMD Compressonator SDK has an out-of-bounds write triggered by a specially crafted DirectDraw Surface (DDS) image file. Opening such a file in a user or automated pipeline can corrupt heap memory or cause a denial of service.","audience":"developers","category":"package","nicknames":[],"who_cares":["amd-compressonator","image-processing","texture-pipelines"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Heap memory corruption or process crash from a crafted file","analyst_note":"Find the affected version range and fixed release in the AMD advisory or the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-40661.","how_to_check":"- Check whether the AMD Compressonator SDK is installed or linked into your build or image-processing pipeline.\n- Confirm the installed version against the affected range in the NVD entry for CVE-2026-40661: unknown from the sources.","plain_action":"","needs_analyst":true,"not_affected_if":["no-untrusted-dds-input"],"who_is_affected":"Teams that build or run tools using the AMD Compressonator SDK to process DDS textures, especially automated pipelines that accept DDS files from outside sources. Systems that never load untrusted DDS files are less exposed. The sources do not give affected version ranges.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000696,"input_tokens":4126,"output_tokens":567,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-40661':14A,17A 'access':88C 'allow':83C 'amd':1A,19B,29B,79C 'amd-compresson':18B 'attack':85C 'autom':57B,103C 'bound':37B,73C 'caus':64B 'compresson':2A,20B,30B,80C 'condit':76C 'corrupt':8A,60B,109C 'could':82C 'craft':4A,43B,93C 'crash':11A 'cve':12A,15A 'dds':5A,46B,96C 'denial':66B,111C 'directdraw':44B,94C 'dos':114C 'file':6A,48B,52B,97C 'heap':9A,61B,108C 'imag':22B,47B 'image-process':21B 'local':87C 'memori':62B 'oow':75C 'open':49B 'out-of-bound':34B,70C 'packag':24B 'pipelin':27B,58B,104C 'potenti':105C 'process':23B 'result':106C 'sdk':3A,31B,81C 'servic':68B,113C 'special':42B,92C 'suppli':90C 'surfac':45B,95C 'textur':26B 'texture-pipelin':25B 'trigger':39B 'user':55B,100C 'write':38B,74C","nicknames":[],"mitigations":[],"who_affected":"Teams that build or run tools using the AMD Compressonator SDK to process DDS textures, especially automated pipelines that accept DDS files from outside sources. Systems that never load untrusted DDS files are less exposed. The sources do not give affected version ranges.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amdcompressonator","imageprocessing","medium","package","texturepipelines"],"first_public_at":"2026-11-03T15:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-40661","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40661","severity":null,"published_at":"2026-11-03T15:17:39+00:00","modified_at":"2026-11-03T15:17:39+00:00","first_seen_at":"2026-11-03T15:22:02+00:00","fetched_at":"2026-11-03T15:22:02+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}