CVE-2026-40661

MEDIUM 5.2CVE-2026-40661 · Published 03/11/2026 · updated 03/11/2026

In short

CVE-2026-40661 is a MEDIUM (CVSS 5.2) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.14%, higher than 3.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS) file to a user or an automated pipeline, potentially resulting in heap corruption or denial of service (DoS).

References

amd.com/en/resources/product-security/bulletin/AMD-SB-6032.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free