High WID-SEC-2026-0246 3 CVEs

Lexmark Laser Printers: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Benutzerrechten

Published Jan 28, 2026 · Updated Feb 5, 2026 · Revision 4 · de-DE

Vendor: Lexmark Product: Laser Printers

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Lexmark Laser Printers ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.

Product

Lexmark ist ein Hersteller von Druckern und Druckerzubehör.

Vulnerabilities 3

Medium 6.9

CVE-2025-65079

Heap-based buffer overflow vulnerability in Postscript interpreter

A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ

Feb 3, 2026
Medium 6.9

CVE-2025-65081

Out-of-bounds read vulnerability in Postscript interpreter

An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ

Feb 3, 2026
Low 3.2

CVE-2025-65083

GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server. This can be pro…

Tinexta Infocert GoSign Desktop

Nov 17, 2025

Revision history

2026-02-05 #4
Referenz(en) aufgenommen: ZDI-26-062, ZDI-26-066, ZDI-26-064
2026-02-04 #3
Referenz(en) aufgenommen: EUVD-2025-206619
2026-02-03 #2
Referenz(en) aufgenommen: EUVD-2025-206662
2026-01-28 #1
Initiale Fassung

References

Lexmark Security Advisory CVE-2025-65079 vom 2026-01-28
https://www.lexmark.com/content/dam/support/collateral/security-alerts/CVE-2025-65079.pdf
Lexmark Security Advisory CVE-2025-65081 vom 2026-01-28
https://www.lexmark.com/content/dam/support/collateral/security-alerts/CVE-2025-65081.pdf
Lexmark Security Advisory CVE-2025-65083 vom 2026-01-28
https://www.lexmark.com/content/dam/support/collateral/security-alerts/CVE-2025-65083.pdf