Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-4044

XML External Entity Injection vulnerability in various Lexmark Universal Drivers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Lexmark

Description

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lexmark Universal Print Driver

Default version status: unaffected

  • 0 to < 3.0.6.0affected

Lexmark Printer Software G2

Default version status: unaffected

  • 0 to < 2.17.0.0affected

References