CVE-2017-16612

7.5 highEPSS 5.2%

High (7.5). EPSS 5.2% chance of exploitation in the next 30 days.

libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 5.2% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2017-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
debian:debian_linux
x:libxcursor

References

http://security.cucumberlinux.com/security/details.php?id=156
http://www.openwall.com/lists/oss-security/2017/11/28/6
http://www.ubuntu.com/usn/USN-3501-1
https://bugzilla.suse.com/show_bug.cgi?id=1065386
https://cgit.freedesktop.org/wayland/wayland/commit/?id=5d201df72f3d4f4cb8b8f75f980169b03507da38

Check your stack JSON