The vulnerability is a heap-based out-of-bounds read in the AMD Compressonator SDK. An attacker with local access can read memory beyond the bounds of a heap buffer, potentially exposing sensitive data or causing an application crash. The primary security impact is the compromise of confidentiality, with a secondary risk of availability if the crash occurs.

Affected vendor and product are AMD and the Compressonator SDK. No specific version information is provided, so all releases of the SDK that contain the vulnerable code are at risk.

The CVSS score of 5.2 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the exploit requires local access, the attack vector is likely local. With the current score, the risk exists but is not considered critical; however, any local attacker who can run code with the SDK could exploit the out-of-bounds read to gain confidential data.