CVE-2026-56364

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-13

Description A memory leak occurs in the LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files that contain unclosed device elements. An attacker with write access to the OpenCL cache directory can use malicious XML files to exhaust system memory, resulting in a denial of service.

Recommendations Update to version 7.1.2-13 or later.