libXcursor before 1.1.15 has various integer overflows that could lead to heap buffer overflows when processing malicious cursors, e.g., with programs like GIMP. https://nvd.nist.gov/vuln/detail/CVE-2017-16612
