It was found that when receiving a response from the server protocol data is not validated sufficiently. This results in various data mishandlings.
Created libXi tracking bugs for this issue:
Affects: fedora-all [bug 1381870]
This was fixed as part of bug 1401672