CVE-2023-50735 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.

2024-02-2802:37:26

CWE-465

Lexmark

www.cve.org

cve-2023-50735

heap corruption

arbitrary code execution

lexmark devices

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "various",
    "vendor": "Lexmark",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]