EUVD-2026-115879
GHSA-pv39-2jwj-ff9v
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain local access or pipeline file submission
-
DeliveryDeliver crafted malformed TGA file
-
ExploitTrigger out-of-bounds read in TGA parser
-
ExecutionLeak heap memory or crash process
-
ImpactInformation disclosure or denial of service
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the attacker to get a specially crafted TGA (Truevision Advanced Raster Graphics Adapter) file parsed by software that uses the AMD Compressonator SDK - either by a local user who opens/converts the file or by an automated asset pipeline that ingests it. Limiting factors per the CVSS vector: the attack vector is local (AV:L), it requires low privileges (PR:L), and it requires user or pipeline interaction to supply/process the file (UI:P) - there is no remote, zero-interaction path. Realistic exposure is therefore highest where untrusted TGA files are automatically processed; purely local, trusted-input workflows have little exposure. |
| Impact | This is a genuinely medium-severity, lower-priority issue rather than an emergency. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:P, score 5.2) describes a local, low-privilege attack that depends on user interaction (a victim or pipeline must process the attacker's file), which materially limits reach compared to a remote network flaw. The vuln.today decision label is 'this_month', consistent with a non-urgent but worth-patching rating. There is no CISA KEV listing, so there is no public evidence of active exploitation, and no EPSS probability is supplied in the input, so widespread-exploitation likelihood cannot be quantified from this data. No PoC or exploit reference is present in the references, so the practical exploitation barrier appears moderate. The impact is asymmetric: confidentiality is high (heap memory disclosure, VC:H) and availability is high (DoS crash, VA:H), while integrity is unaffected (VI:N) - consistent with an out-of-bounds read (CWE-125) that leaks or crashes but does not corrupt. The main caveat is that the SDK is often embedded in automated asset-processing pipelines, which can quietly convert 'local + user interaction' into a repeatable vector if untrusted TGA files are ingested at scale. |
| Exploit ScenarioDerived | An attacker crafts a malformed Truevision TGA image and gets it processed by a developer or an automated asset/texture pipeline that uses the AMD Compressonator SDK. When the SDK's TGA parser reads past the bounds of the input buffer, it either leaks adjacent heap memory contents back into output/logs or crashes the process, yielding information disclosure or denial of service. No public exploit code is identified in the provided sources. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Nov 03, 2026
An out-of-bounds read in the TGA image parser of the AMD Compressonator SDK allows a low-privileged local attacker to supply a crafted Truevision TGA file that, when parsed by software built on the SDK, over-reads a heap buffer and can disclose sensitive memory contents or crash the consuming process. Because the crafted file must be opened by a user or ingested by an automated asset pipeline, realistic exposure is concentrated in pipelines that automatically process untrusted TGA assets rather than in local workflows handling only trusted input. No public exploit code has been identified at time of analysis, and the issue carries a medium CVSS 4.0 base score of 5.2 (AV:L/AC:L/AT:N/PR:L/UI:P, with high confidentiality and availability impact and no integrity or scope impact).
RemediationAI
The provided data does not identify an exact fixed SDK version, so the first step is to check AMD security bulletin AMD-SB-6032 (https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6032.html) for the patched Compressonator SDK release and upgrade any bundled or linked copy to that build; downstream applications that vendor the SDK must be rebuilt against the corrected version. Where an immediate upgrade is not possible, reduce exposure by removing TGA from the accepted input types in automated asset pipelines or pre-converting untrusted TGA files to a different format in a disposable, low-privilege container before they reach SDK-based tooling (trade-off: breaks legitimate TGA ingestion workflows and adds conversion overhead), and run any converter or viewer that uses the SDK under a sandbox or restricted account so a successful heap over-read cannot leak process memory beyond the sandbox (trade-off: added CPU and operational complexity, and output fidelity or performance may be affected). Restricting who can place files into pipeline watch folders and reviewing untrusted TGA assets manually before batch processing further limits the local, interaction-dependent attack path described in the vector.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is an out-of-bounds read (CWE-125) in the AMD Compressonator SDK, AMD's toolkit for texture conversion, compression and asset processing used by game and graphics pipelines. The vulnerable surface is TGA (Truevision Advanced Raster Graphics Adapter) file parsing: a malformed TGA header, image-ID, color-map or RLE-packet structure can drive the parser to read past the bounds of an allocated heap buffer, which yields either disclosure of adjacent heap memory in the output or a fault that terminates the process. The assessed vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H) confirms a local attack path requiring low privileges and some form of user or pipeline interaction to deliver the file; there is no remote, zero-interaction path, and integrity and scope are unaffected. The provided sources do not state which specific TGA field or code path is mishandled, so the precise trigger condition is not described in the available data. No KEV listing exists and no public exploit code has been identified.
Know when Amd gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Local file-processing flaw needing a victim/pipeline to open the file, so AV:L/PR:L/UI:R; heap read gives C:H, a crash gives A:H, and no corruption means I:N.
Primary rating from Vendor (amd).
CVSS VectorVendor: amd
DescriptionCVE.org
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file to a user or an automated pipeline, potentially resulting in disclosure of sensitive heap memory contents or denial of service.
Threat Intelligence Overview
NVD
CVE.org
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.
Local privilege escalation and information disclosure in the Linux kernel on AMD Zen2 CPUs allows low-privileged users t
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.
An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. Rated criti
plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. Rated high severity (CVSS 8.8), this vu
AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of se
An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. Rated high
AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. Rated high severity (CVSS 7.8),
AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack. Rated high severity (CVSS 7.8),
Exploit-DB