CVE-2017-16612

CVE-2017-16612 describes multiple integer overflows in libXcursor versions prior to 1.1.15, potentially leading to heap buffer overflows when processing malicious cursor files. This vulnerability affects various Linux distributions including Canonical, Debian, and X.org, and could also impact Wayland. The vulnerability carries a CVSSv3 score of 7.5 (HIGH), indicating a high severity with a network attack vector and low attack complexity, allowing for potential denial of service. While it does not require user interaction, it primarily impacts availability rather than confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and a lack of widespread attention.