Heap-Based Out-of-Bounds Read Vulnerability in AMD Compressonator SDK
CVE-2026-40660

5.2MEDIUM

Key Information:

Vendor

Amd
Status
Amd Compressionator Sdk
Vendor
CVE Published:
3 November 2026

What is CVE-2026-40660?

A heap-based out-of-bounds read vulnerability in the AMD Compressonator SDK enables local attackers to access sensitive information by reading memory outside the intended boundary. This flaw may lead to unintended information disclosure and can cause the application to crash, impacting overall system stability and security.

Affected Version(s)

AMD Compressionator SDK AMD Compressonator SDK 4.6

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.