_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow. https://nvd.nist.gov/vuln/detail/CVE-2015-9262