Description
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap allocation and a subsequent out-of-bounds read, potentially resulting in process termination or limited disclosure of heap memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | AMD Compressionator SDK | — | v4.6.0 |