CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

CVE details

CVE-2026-56364

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory and cause denial of service.

Score
1.8 low
Published
2026-06-30
Links
NVD · cve.org

Affected ports (2)

PortPackageVersionStatusMaintainer
graphics/ImageMagick6ImageMagick66.9.13.50_1,1unaddresseddesktop@FreeBSD.org
graphics/ImageMagick6ImageMagick6-nox116.9.13.50_1,1unaddresseddesktop@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>ImageMagick6</name>
	<range><lt>7.1.2-13</lt></range>
      </package>
      <package>
	<name>ImageMagick6-nox11</name>
	<range><lt>7.1.2-13</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>ImageMagick before 7.1.2-13 contains a memory leak vulnerability in
	LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL
	device profile XML files with unclosed device elements. Attackers with
	write access to the OpenCL cache directory can place malicious XML
	files to exhaust memory and cause denial of service.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2026-56364</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2026-56364</url>
    </references>
    <dates>
      <discovery>2026-06-30</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>