CVE-2026-116154: ImageMagick Memory Leak When XML Parsing Hits the Recursion Depth Limit

DestroyXMLTree_ returns at recursion depth 600 before freeing the current node; because the depth counter doubles per edge, 150 levels of alternating nesting strand an attacker-controlled subtree on the heap.

Upgrade to ImageMagick 7.1.2-33 or 6.9.13-58; the durable fix replaces the recursive destructor with an iterative traversal.