{"id":"CVE-2025-65079","state":"PUBLISHED","title":"Heap-based buffer overflow vulnerability in Postscript interpreter","description":"A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","publishedAt":"2026-02-03T20:23:24.405Z","updatedAt":"2026-02-26T15:04:24.490Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"Lexmark"},"assigner":"Lexmark","products":["Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG"],"affected":[{"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.210","versionType":"custom"}]},{"vendor":"Lexmark","product":"CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"230.506","versionType":"custom"}]}],"references":["https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"],"weaknesses":["CWE-122"],"ingestedAt":"2026-10-29T20:09:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/65xxx/CVE-2025-65079.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-65079","state":"PUBLISHED","datePublished":"2026-02-03T20:23:24.405Z","dateUpdated":"2026-02-26T15:04:24.490Z","assignerShortName":"Lexmark","assignerOrgId":"7bc73191-a2b6-4c63-9918-753964601853","dateReserved":"2025-11-17T13:56:38.589Z"},"containers":{"cna":{"title":"Heap-based buffer overflow vulnerability in Postscript interpreter","descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."}],"affected":[{"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.210","versionType":"custom"}]},{"vendor":"Lexmark","product":"CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"230.506","versionType":"custom"}]}],"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6.9,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Lexmark","orgId":"7bc73191-a2b6-4c63-9918-753964601853","dateUpdated":"2026-02-03T20:23:24.405Z"},"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n<br>"}],"value":"Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."}],"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"source":{"discovery":"UNKNOWN"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark recommends a firmware update if your device has affected firmware.\n\n<br>"}],"value":"Lexmark recommends a firmware update if your device has affected firmware."}],"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-65079","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-02-04T04:56:06.044346Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T15:04:24.490Z"}}]}}}