CVE-2026-40659: Integer Overflow

Published Nov 3, 2026

Updated

An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file, potentially resulting in denial of service (DoS).

Event History

Nov 3, 2026

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

DescriptionWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local access and must be able to supply a specially crafted DDS file to the AMD Compressonator SDK. The reported impact is denial of service.

Does exploitation require user interaction?

Yes. The supplied severity vector indicates that user interaction is required, so a user would need to process the crafted DDS file.

What is the availability impact?

The vulnerability is assessed as having high impact on availability, while confidentiality and integrity impacts are listed as none.

CVE-2026-40659: Integer Overflow

Event History

Frequently Asked Questions

Who can exploit this issue?

Does exploitation require user interaction?

What is the availability impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Does exploitation require user interaction?

What is the availability impact?