It is possible to trigger heap overflows due to an integer overflow while parsing images and a signedness issue while parsing comments.The integer overflow occurs because the chosen limit 0x10000 for dimensions is too large for 32 bit systems, because each pixel takes4 bytes. Properly chosen values allow an overflow which in turn will lead to less allocated memory than needed for subsequent reads. Fixed In Version: libXcursor 1.1.15