VULNERABILITY INTELLIGENCE
CVE-2017-16612
CVSS score7.5 HIGH
EPSS probability5.17%
CISA KEVNot currently listed
Published2017-12-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.
Weakness classification
- CWE-190: Integer Overflow or Wraparound
Primary references
- cve@mitre.org — Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Issue Tracking, Tool Signature, VDB Entry
- cve@mitre.org
- cve@mitre.org — Exploit, Patch, Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory