JLSEC-2026-1045

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-1045.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1045.json

JSON Data

https://api.osv.dev/v1/vulns/JLSEC-2026-1045

Upstream

CVE-2026-56364

EUVD-2026-40447

GHSA-9gjp-pj3g-87pq

Published

2026-07-30T16:02:27.435Z

Modified

2026-07-30T18:35:39.701861876Z

Severity

1.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
1.8 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark()...

Details

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark() function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory and cause denial of service.

Database specific

{
    "sources": [
        {
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56364",
            "published": "2026-06-30T23:17:31.397Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-56364",
            "imported": "2026-07-30T14:08:48.352Z",
            "id": "CVE-2026-56364",
            "database_specific": {
                "status": "Analyzed"
            },
            "modified": "2026-07-02T18:34:24.227Z"
        },
        {
            "imported": "2026-07-30T14:09:22.342Z",
            "published": "2026-07-01T00:34:14Z",
            "url": "https://api.github.com/advisories/GHSA-9gjp-pj3g-87pq",
            "html_url": "https://github.com/advisories/GHSA-9gjp-pj3g-87pq",
            "id": "GHSA-9gjp-pj3g-87pq",
            "modified": "2026-07-01T00:34:45Z"
        },
        {
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40447",
            "published": "2026-06-30T22:08:37Z",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-40447",
            "imported": "2026-07-30T14:08:52.655Z",
            "id": "EUVD-2026-40447",
            "modified": "2026-07-01T13:50:14Z"
        }
    ],
    "license": "CC-BY-4.0"
}

References

Affected packages

Julia / ImageMagick_jll

Package

Name: ImageMagick_jll
Purl: pkg:julia/ImageMagick_jll?uuid=c73af94c-d91f-53ed-93a7-00f77d67a9d7

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.1.2023+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-1045.json"