Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices

Summary

A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

Timeline

1. Feb 13, 2025, 6:46 PM UTCCVE published
2. Feb 13, 2025, 7:16 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Feb 13, 2025, 7:19 PM UTCRecord last updated

Affected versions

• Lexmark International CX, XC, CS, MS, MX, XM, et. al.

  through CXTLS.230.341; through CSTLS.230.341; through MSNSN.230.341; through MSTSN.230.341; through MXTSN.230.341; through CSNGV.230.341; through CSTGV.230.341; through CXTGV.230.341; through CXTPC.230.341; through CSTPC.230.341; through MXTCT.230.341; through MXTPM.230.341; through CXTMM.230.341; through CSTMM.230.341; through MSLSG.230.341; through MXLSG.230.341; through MSLBD.230.341; through MXLBD.230.341; through MSNGM.230.341; through MSTGM.230.341; through MXNGM.230.341; through MXTGM.230.341; through MSNGW.230.341; through MSTGW.230.341; through MXTGW.230.341; through CSLBN.230.341; through CSLBL.230.341; through CXLBN.230.341; through CXLBL.230.341; through CSTZJ.230.341; through CSNZJ.230.341; through CXTZJ.230.341; through CXNZJ.230.341; through CXTPP.230.341; through CSTPP.230.341; through CSTAT.230.341; through CXTAT.230.341; through CSTMH.230.341; through CXTMH.230.341; through LW90.TL2.P215; through LW90.PR2.P215; through LW90.PR4.P215; through LW90.SB4.P215; through LW90.SB7.P215; through LW90.DN2.P215; through LW90.DN4.P215; through LW90.DN7.P215; through LW90.TU.P215; through LW90.SA.P215; through LW90.MG.P215; through LW90.GM7.P215; through LW90.GM4.P215; through LW80.PRL.P257; through LW80.SB2.P257; through LW80.VYL.P257; through LW80.VY2.P257; through LW80.GM2P257

References 1