227 matches found
CVE-2025-65077 Relative path traversal vulnerability in Embedded Solutions Framework
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65081 Out-of-bounds read vulnerability in Postscript interpreter
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65081
CVE-2025-65081 affects Lexmark devices with a Postscript interpreter. A heap-based buffer overrun in the Postscript interpreter’s execuserobject function can allow a network-adjacent attacker to execute arbitrary code without authentication on affected installations (Lexmark CX532adwe noted in ZD...
EUVD-2025-206619
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65081 Out-of-bounds read vulnerability in Postscript interpreter
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65081
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65080 Type confusion vulnerability in Postscript interpreter
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65080
CVE-2025-65080 describes a type-confusion vulnerability in the PostScript interpreter used by Lexmark devices. The flaw enables arbitrary code execution in the context of an unprivileged user and is exploitable by network-adjacent attackers (no authentication required) per ZDI details. Affected s...
CVE-2025-65080 Type confusion vulnerability in Postscript interpreter
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65079 Heap-based buffer overflow vulnerability in Postscript interpreter
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
EUVD-2025-206662
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65079
CVE-2025-65079 affects Lexmark devices’ Postscript interpreter. ZDI reports a heap-based buffer overflow in getCFFNames, caused by improper validation of user-supplied data length before copying to a heap buffer. This enables network-adjacent attackers to execute arbitrary code with the pagemaker...
CVE-2025-65079
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
CVE-2025-65079 Heap-based buffer overflow vulnerability in Postscript interpreter
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user...
PT-2026-5948
Name of the Vulnerable Software and Affected Versions Lexmark CX532adwe affected versions not specified Description A type confusion exists within the Postscript interpreter in Lexmark devices. This issue allows an attacker to execute arbitrary code as an unprivileged user. The vulnerability was...
PT-2026-5947
Name of the Vulnerable Software and Affected Versions Lexmark devices affected versions not specified Description A heap-based buffer overflow exists in the Postscript interpreter. An attacker can exploit this to execute arbitrary code with unprivileged user access. Recommendations At the moment,...
PT-2026-5949
Name of the Vulnerable Software and Affected Versions Lexmark devices affected versions not specified Description An out-of-bounds read issue exists in the Postscript interpreter used in Lexmark devices. An attacker can potentially use this to execute arbitrary code with unprivileged user...
CVE-2023-40239
Certain Lexmark devices such as CS310 before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80..P246, i.e., '' indicates that the full version specification varies across product model family, but firmware level P246 or higher is required to...