CVE-2024-11345CWE-787

Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices

High · published February 13, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-02-13T18:46Z
EPSS history
Timeline
  • 13 FEB 18:46Z
    Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices
    cvelistv5