MEDIUM 6.9 NVD

CVE-2026-100493

An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap alloc

An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process termination or limited disclosure of heap memory.

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6032.html

Published: 2026-11-03 · Source: NVD · Feed updated: 2026-11-03

This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-11-03 via NVD.

vulnfeed aggregates 18261 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.