{"id":"EUVD-2026-40447","revision":"1e3af7dc0fd74328bea1dfb4eaf227a3","records":[{"revision":"1e3af7dc0fd74328bea1dfb4eaf227a3","observedAt":"2026-10-28T08:15:00.809+00:00","statement":{"source":"euvd","id":"EUVD-2026-40447","aliases":["CVE-2026-56364","GHSA-9gjp-pj3g-87pq"],"title":"ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache d…","description":"ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory and cause denial of service.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","score":1.8,"severity":null}],"references":["https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp59-x883-77qv","https://github.com/ImageMagick/ImageMagick/commit/a52c1b402be08ef8ae193f28ac5b2e120f2fa26f","https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-loadopencldevicebenchmark-via-malformed-xml"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40447","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 30, 2026, 10:08:37 PM","dateUpdated":"Jul 1, 2026, 1:50:14 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2026:22620-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-53466","CVE-2026-53467","CVE-2026-55594","CVE-2026-55595","CVE-2026-55597","CVE-2026-56361","CVE-2026-56363","CVE-2026-56364","CVE-2026-56374","CVE-2026-56379"]},{"id":"openSUSE-SU-2026:21291-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-53466","CVE-2026-53467","CVE-2026-55594","CVE-2026-55595","CVE-2026-55597","CVE-2026-56361","CVE-2026-56363","CVE-2026-56364","CVE-2026-56374","CVE-2026-56379"]},{"id":"openSUSE-SU-2026:11228-1","title":"ImageMagick-7.1.2.27-1.1 on GA media","vulnerabilityIds":["CVE-2026-53466","CVE-2026-53467","CVE-2026-55510","CVE-2026-55577","CVE-2026-55594","CVE-2026-55595","CVE-2026-55597","CVE-2026-55628","CVE-2026-56361","CVE-2026-56362","CVE-2026-56363","CVE-2026-56364","CVE-2026-56365","CVE-2026-56374","CVE-2026-56377"]},{"id":"SUSE-SU-2026:3023-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-40169","CVE-2026-42050","CVE-2026-42326","CVE-2026-45031","CVE-2026-45358","CVE-2026-45359","CVE-2026-45624","CVE-2026-45664","CVE-2026-46520","CVE-2026-46521","CVE-2026-46522","CVE-2026-46523","CVE-2026-46557","CVE-2026-46559","CVE-2026-46692","CVE-2026-46693","CVE-2026-47165","CVE-2026-47166","CVE-2026-48734","CVE-2026-48994","CVE-2026-49218","CVE-2026-53460","CVE-2026-53461","CVE-2026-53463","CVE-2026-53464","CVE-2026-53466","CVE-2026-53467","CVE-2026-55594","CVE-2026-55595","CVE-2026-55597","CVE-2026-56361","CVE-2026-56363","CVE-2026-56364","CVE-2026-56365","CVE-2026-56367","CVE-2026-56368","CVE-2026-56370","CVE-2026-56371","CVE-2026-56374","CVE-2026-56376","CVE-2026-56379"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-40447","identifiers":["EUVD-2026-40447","CVE-2026-56364","GHSA-9gjp-pj3g-87pq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}