A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash. CREATE(Triage):(User=lchen-cn) CVE-2025-49175 (https://nvd.nist.gov/vuln/detail/CVE-2025-49175)