CVE-2026-40652 — Vulnerability intelligence
—
Published:
- CVSS
- 5.2
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.