Integer Overflow Vulnerability in AMD Compressonator SDK DDS RGB888 Loader

CVE-2026-100493

What is CVE-2026-100493?

An integer overflow vulnerability exists in the DDS RGB888 loader component of the AMD Compressonator SDK. This flaw allows an attacker to craft a malicious DDS file that, when processed, triggers an undersized heap allocation. This can lead to an out-of-bounds read, exposing the potential for process termination and limited disclosure of sensitive heap memory. Users of affected versions are advised to upgrade to the latest release, which addresses this vulnerability and enhances overall product security. For detailed information, please visit the official AMD security bulletin.

References