CVE-2024-11347CWE-190

Access of Resource Using Incompatible Type in Postscript interpreter

High · published February 13, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.7th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-02-13T18:55Z
EPSS history
Timeline
  • 13 FEB 18:55Z
    Access of Resource Using Incompatible Type in Postscript interpreter
    cvelistv5