CVE-2026-40652

Quick assessment

Affected

AMD AMD Compressionator SDK

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

AMD Compressonator SDK 中存在一个越界读取漏洞。拥有本地访问权限的攻击者可向用户或自动化流程提供特制的 Truevision Advanced Raster Graphics Adapter（TGA）文件，可能导致敏感堆内存内容泄露或引发拒绝服务（DoS）。

CVSS 5.2 · Medium Updated Nov 03, 2026

Possible ATT&CK Techniques 2 AI

T1068 · Exploitation for Privilege Escalation T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
AMD	AMD Compressionator SDK	AMD Compressonator SDK 4.6	-

II. Public POCs for CVE-2026-40652

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-40652

请登录查看更多情报信息。

Other References for CVE-2026-40652 (1)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6032.html

https://www.cve.org/CVERecord?id=CVE-2026-40652

Same Patch Batch · AMD · 2026-11-03 · 6 CVEs total

CVE-2026-100493	6.9 MEDIUM	AMD Compressonator SDK 整数溢出导致越界读取
CVE-2026-43603	6.9 MEDIUM	Linux GPU 驱动空指针解引用漏洞致拒绝服务
CVE-2026-40661	5.2 MEDIUM	AMD Compressonator SDK 越界写漏洞
CVE-2026-40660	5.2 MEDIUM	AMD Compressonator SDK 堆越界读取漏洞
CVE-2026-40659	5.1 MEDIUM	AMD Compressonator SDK 整数溢出导致拒绝服务

IV. Related Vulnerabilities

Same product: AMD Compressionator SDK

Same vendor: AMD

Same weakness: CWE-125