Riskcovery

CVE-2024-11345

Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices

State
Published
Severity
7.3 High
Published
Feb 13, 2025
Updated
Feb 13, 2025
Reserved
Nov 18, 2024

Read the record on cve.org

Description

A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LLexmark

Weaknesses

Affected Products

ProductVersions
CX, XC, CS, MS, MX, XM, et. al.Lexmark International
  • CXTLS.230.341 and earlierAffectedfrom CXTLS.230.342 and laterNot affected
  • CSTLS.230.341 and earlierAffectedfrom CSTLS.230.342 and laterNot affected
  • MSNSN.230.341 and earlierAffectedfrom MSNSN.230.342 and laterNot affected
  • MSTSN.230.341 and earlierAffectedfrom MSTSN.230.342 and laterNot affected
  • MXTSN.230.341 and earlierAffectedfrom MXTSN.230.342 and laterNot affected
  • CSNGV.230.341 and earlierAffectedfrom CSNGV.230.342 and laterNot affected
  • CSTGV.230.341 and earlierAffectedfrom CSTGV.230.342 and laterNot affected
  • CXTGV.230.341 and earlierAffectedfrom CXTGV.230.342 and laterNot affected
  • CXTPC.230.341 and earlierAffectedfrom CXTPC.230.342 and laterNot affected
  • CSTPC.230.341 and earlierAffectedfrom CSTPC.230.342 and laterNot affected
  • MXTCT.230.341 and earlierAffectedfrom MXTCT.230.342 and laterNot affected
  • MXTPM.230.341 and earlierAffectedfrom MXTPM.230.342 and laterNot affected
  • CXTMM.230.341 and earlierAffectedfrom CXTMM.230.342 and laterNot affected
  • CSTMM.230.341 and earlierAffectedfrom CSTMM.230.342 and laterNot affected
  • MSLSG.230.341 and earlierAffectedfrom MSLSG.230.342 and laterNot affected
  • MXLSG.230.341 and earlierAffectedfrom MXLSG.230.342 and laterNot affected
  • MSLBD.230.341 and earlierAffectedfrom MSLBD.230.342 and laterNot affected
  • MXLBD.230.341 and earlierAffectedfrom MXLBD.230.342 and laterNot affected
  • MSNGM.230.341 and earlierAffectedfrom MSNGM.230.342 and laterNot affected
  • MSTGM.230.341 and earlierAffectedfrom MSTGM.230.342 and laterNot affected
  • MXNGM.230.341 and earlierAffectedfrom MXNGM.230.342 and laterNot affected
  • MXTGM.230.341 and earlierAffectedfrom MXTGM.230.342 and laterNot affected
  • MSNGW.230.341 and earlierAffectedfrom MSNGW.230.342 and laterNot affected
  • MSTGW.230.341 and earlierAffectedfrom MSTGW.230.342 and laterNot affected
  • MXTGW.230.341 and earlierAffectedfrom MXTGW.230.342 and laterNot affected
  • and 32 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.