CVE-2024-11345 — Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices

Description (CNA)

A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lexmark International / CX, XC, CS, MS, MX, XM, et. al.	affected 0 through CXTLS.230.341; affected 0 through CSTLS.230.341; affected 0 through MSNSN.230.341; affected 0 through MSTSN.230.341; affected 0 through MXTSN.230.341; affected 0 through CSNGV.230.341; affected 0 through CSTGV.230.341; affected 0 through CXTGV.230.341; affected 0 through CXTPC.230.341; affected 0 through CSTPC.230.341; affected 0 through MXTCT.230.341; affected 0 through MXTPM.230.341; affected 0 through CXTMM.230.341; affected 0 through CSTMM.230.341; affected 0 through MSLSG.230.341; affected 0 through MXLSG.230.341; affected 0 through MSLBD.230.341; affected 0 through MXLBD.230.341; affected 0 through MSNGM.230.341; affected 0 through MSTGM.230.341; affected 0 through MXNGM.230.341; affected 0 through MXTGM.230.341; affected 0 through MSNGW.230.341; affected 0 through MSTGW.230.341; affected 0 through MXTGW.230.341; affected 0 through CSLBN.230.341; affected 0 through CSLBL.230.341; affected 0 through CXLBN.230.341; affected 0 through CXLBL.230.341; affected 0 through CSTZJ.230.341; affected 0 through CSNZJ.230.341; affected 0 through CXTZJ.230.341; affected 0 through CXNZJ.230.341; affected 0 through CXTPP.230.341; affected 0 through CSTPP.230.341; affected 0 through CSTAT.230.341; affected 0 through CXTAT.230.341; affected 0 through CSTMH.230.341; affected 0 through CXTMH.230.341; affected 0 through LW90.TL2.P215; affected 0 through LW90.PR2.P215; affected 0 through LW90.PR4.P215; affected 0 through LW90.SB4.P215; affected 0 through LW90.SB7.P215; affected 0 through LW90.DN2.P215; affected 0 through LW90.DN4.P215; affected 0 through LW90.DN7.P215; affected 0 through LW90.TU.P215; affected 0 through LW90.SA.P215; affected 0 through LW90.MG.P215; affected 0 through LW90.GM7.P215; affected 0 through LW90.GM4.P215; affected 0 through LW80.PRL.P257; affected 0 through LW80.SB2.P257; affected 0 through LW80.VYL.P257; affected 0 through LW80.VY2.P257; affected 0 through LW80.GM2P257

Vendor / product

Versions

Lexmark International / CX, XC, CS, MS, MX, XM, et. al.

affected 0 through CXTLS.230.341; affected 0 through CSTLS.230.341; affected 0 through MSNSN.230.341; affected 0 through MSTSN.230.341; affected 0 through MXTSN.230.341; affected 0 through CSNGV.230.341; affected 0 through CSTGV.230.341; affected 0 through CXTGV.230.341; affected 0 through CXTPC.230.341; affected 0 through CSTPC.230.341; affected 0 through MXTCT.230.341; affected 0 through MXTPM.230.341; affected 0 through CXTMM.230.341; affected 0 through CSTMM.230.341; affected 0 through MSLSG.230.341; affected 0 through MXLSG.230.341; affected 0 through MSLBD.230.341; affected 0 through MXLBD.230.341; affected 0 through MSNGM.230.341; affected 0 through MSTGM.230.341; affected 0 through MXNGM.230.341; affected 0 through MXTGM.230.341; affected 0 through MSNGW.230.341; affected 0 through MSTGW.230.341; affected 0 through MXTGW.230.341; affected 0 through CSLBN.230.341; affected 0 through CSLBL.230.341; affected 0 through CXLBN.230.341; affected 0 through CXLBL.230.341; affected 0 through CSTZJ.230.341; affected 0 through CSNZJ.230.341; affected 0 through CXTZJ.230.341; affected 0 through CXNZJ.230.341; affected 0 through CXTPP.230.341; affected 0 through CSTPP.230.341; affected 0 through CSTAT.230.341; affected 0 through CXTAT.230.341; affected 0 through CSTMH.230.341; affected 0 through CXTMH.230.341; affected 0 through LW90.TL2.P215; affected 0 through LW90.PR2.P215; affected 0 through LW90.PR4.P215; affected 0 through LW90.SB4.P215; affected 0 through LW90.SB7.P215; affected 0 through LW90.DN2.P215; affected 0 through LW90.DN4.P215; affected 0 through LW90.DN7.P215; affected 0 through LW90.TU.P215; affected 0 through LW90.SA.P215; affected 0 through LW90.MG.P215; affected 0 through LW90.GM7.P215; affected 0 through LW90.GM4.P215; affected 0 through LW80.PRL.P257; affected 0 through LW80.SB2.P257; affected 0 through LW80.VYL.P257; affected 0 through LW80.VY2.P257; affected 0 through LW80.GM2P257

CWE

CWE-787

References

https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.