PT-2026-136238
CVE-2026-40652
·
Published
2026-11-03
·
Updated
2026-11-03
Description by
CVSS 4.0
5.2
MediumMetricsAV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.
Found an issue in the description? Have something to add? Feel free to write us 👾