CVE-2017-16612

libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like…

published December 1, 2017

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05173 · 92.4th percentile
Published
2017-12-01T17:00Z
EPSS history
Timeline
  • 01 DEC 17:00Z
    libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like…
    cvelistv5