An integer overflow can be triggered when AMD Compressonator SDK processes a maliciously crafted DirectDraw Surface (DDS) file. The overflow can corrupt internal counters or buffers, potentially causing the SDK to crash and result in a denial‑of‑service for any process that invokes it. The vulnerability does not provide a remote execution path; it requires the attacker to run locally in a context that has access to the SDK.

The flaw affects the AMD Compressonator SDK as distributed by AMD. Any installation that includes the SDK and processes DDS files—such as graphics designers, game developers, or applications leveraging AMD SDK functionality—could be impacted. The CVE report does not list specific software versions, so all current releases that use the SDK’s DDS parser should be reviewed for the presence of the vulnerability.

The CVSS score is 5.1 (medium), indicating a moderate severity of a local denial‑of‑service. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. The attack requires local access and the ability to supply a crafted DDS file to the vulnerable component; thus, an attacker would need sufficient local privileges or a privileged user context. Because the flaw results only in a crash rather than arbitrary code execution, the risk of lateral movement is low, but repeated exploitation could cause service disruption.