CVE-2001-0775: Xli

High severity, CVSS 7.5. EPSS: 16.3% chance of exploitation in the next 30 days.

Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.

Affected products

• Xli Xli: version 1.16 only; version 1.17 only
• Xloadimage Xloadimage: version 4.1 only

Published 2001-10-18. Last modified 2026-06-16.