libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. It is also possible that an attack vector exists against the related code in cursor/xcursor.c in Wayland through 1.14.0.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-libxcursor | Feb 21, 2018 | Dec 1, 2017 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Dec 1, 2017 | |
| Debian | debian-upgrade-libxcursordebian-upgrade-wayland | Dec 10, 2017 | Nov 29, 2017 | |
| Freebsd | freebsd-upgrade-package-libxcursor | Dec 20, 2017 | Dec 17, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-libxcursor | Jan 8, 2018 | Dec 1, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libxcursorhuawei-euleros-2_0_sp1-upgrade-libxcursor-devel | Jan 19, 2018 | Dec 1, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libxcursorhuawei-euleros-2_0_sp2-upgrade-libxcursor-devel | Jan 19, 2018 | Dec 1, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-x11-library-libxcursor-1-1-15-0-175-3-31-0-2-1545oracle-solaris-11-3-upgrade-x11-library-libxfont-1-5-4-0-175-3-31-0-2-1545 | Apr 18, 2018 | Dec 1, 2017 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Nov 25, 2017 |
| Suse | — | suse-upgrade-libxcursor-develsuse-upgrade-libxcursor1suse-upgrade-libxcursor1-32bitsuse-upgrade-xorg-x11-develsuse-upgrade-xorg-x11-devel-32bitsuse-upgrade-xorg-x11-libssuse-upgrade-xorg-x11-libs-32bitsuse-upgrade-xorg-x11-libs-x86 | Dec 5, 2017 | Nov 29, 2017 |
| Ubuntu | ubuntu-upgrade-libwayland-binubuntu-upgrade-libwayland-client0ubuntu-upgrade-libwayland-cursor0ubuntu-upgrade-libwayland-devubuntu-upgrade-libwayland-docubuntu-upgrade-libwayland-server0ubuntu-upgrade-libxcursor1 | Nov 29, 2017 | Nov 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub