Skip to content
OpenAdvisories
High · 7.3 CVE-2024-11347 EUVD-2025-4912GHSA-qh3f-r8jw-4x86

Access of Resource Using Incompatible Type in Postscript interpreter

Published Feb 13, 2025 · Updated Feb 13, 2025 · Assigned by Lexmark

Description

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Affected products

VendorProductAffectedFixed
Lexmark International CX, XC, CS, et. al. ≤ CXTLS.240.076, CXTLS.240.200, ≤ MXTLS.240.076, MXTLS.240.200, ≤ CSTLS.240.076, CSTLS.240.200, ≤ MSNSN.240.042, MSNSN.240.200, ≤ MSTSN.240.042, MSTSN.240.200, ≤ MXTSN.240.042, MXTSN.240.200, ≤ CSNGV.240.042, CSNGV.240.200, ≤ CSTGV.240.042, CSTGV.240.200, ≤ CXTGV.240.042, CXTGV.240.200, ≤ CXTPC.240… —

Advisories 1

References