PT-2026-54043 · Imagemagick · Imagemagick

Keryer · Publicado 2026-06-30 · Atualizado 2026-06-30 · CVE-2026-56364

NVD

CVSS v3.1

1.9

Baixa

Vetor base

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory and cause denial of service.

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2026-56364

Produtos afetados

Imagemagick

Referências · 4

• https://github.com/ImageMagick/ImageMagick/commit/a52c1b402be08ef8ae193f28ac5b2e120f2fa26f · Correção
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp59-x883-77qv · Aviso do Fabricante
• https://vulncheck.com/advisories/imagemagick-memory-leak-in-loadopencldevicebenchmark-via-malformed-xml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56364 · Nota de Segurança