CVE-2015-9262: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days.

_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Red Hat Ansible Tower: version 3.3 only
• Red Hat Enterprise Linux Desktop: version 7.0 only
• Red Hat Enterprise Linux Server: version 7.0 only
• Red Hat Enterprise Linux Workstation: version 7.0 only
• X Libxcursor: before 1.1.15 (fixed in 1.1.15)

Published 2018-08-01. Last modified 2026-06-17.