Vulnerability details
CVE-2024-11345
Lexmark International CX
Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices
CVSS 3.1
7.3High
Official description
A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.3High | 3.1 | CVEProject cvelistV5 (CNA) (Lexmark) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTLS.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTLS.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSNSN.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSTSN.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTSN.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSNGV.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTGV.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTGV.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTPC.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTPC.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTCT.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTPM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTMM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTMM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSLSG.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXLSG.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSLBD.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXLBD.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSNGM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSTGM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXNGM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTGM.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSNGW.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MSTGW.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ MXTGW.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSLBN.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSLBL.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXLBN.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXLBL.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTZJ.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSNZJ.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTZJ.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXNZJ.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTPP.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTPP.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTAT.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTAT.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CSTMH.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ CXTMH.230.341 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.TL2.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.PR2.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.PR4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.SB4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.SB7.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.DN2.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.DN4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.DN7.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.TU.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.SA.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.MG.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.GM7.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW90.GM4.P215 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.PRL.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.SB2.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.VYL.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.VY2.P257 | CVEProject cvelistV5 (CNA) |
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. | v ≤ LW80.GM2P257 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-02-13
- Last updated
- 2025-02-13
- State
- Published
- Assigner (CNA)
- Lexmark
Exploit prediction (EPSS)
0.45%
Probability of exploitation in 30 days
39.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-787Out-of-bounds Write