{"id":"CVE-2025-65081","state":"PUBLISHED","title":"Out-of-bounds read vulnerability in Postscript interpreter","description":"An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","publishedAt":"2026-02-03T20:39:14.501Z","updatedAt":"2026-02-26T15:04:23.914Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","source":"Lexmark"},"assigner":"Lexmark","products":["Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG"],"affected":[{"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.210","versionType":"custom"}]},{"vendor":"Lexmark","product":"CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"230.506","versionType":"custom"}]}],"references":["https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"],"weaknesses":["CWE-125"],"ingestedAt":"2026-10-29T20:09:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/65xxx/CVE-2025-65081.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-65081","state":"PUBLISHED","datePublished":"2026-02-03T20:39:14.501Z","dateUpdated":"2026-02-26T15:04:23.914Z","assignerShortName":"Lexmark","assignerOrgId":"7bc73191-a2b6-4c63-9918-753964601853","dateReserved":"2025-11-17T13:56:38.589Z"},"containers":{"cna":{"title":"Out-of-bounds read vulnerability in Postscript interpreter","descriptions":[{"lang":"en","value":"An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."}],"affected":[{"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.210","versionType":"custom"}]},{"vendor":"Lexmark","product":"CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"230.506","versionType":"custom"}]}],"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6.9,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Lexmark","orgId":"7bc73191-a2b6-4c63-9918-753964601853","dateUpdated":"2026-02-03T20:39:14.501Z"},"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n<br>"}],"value":"Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."}],"impacts":[{"capecId":"CAPEC-153","descriptions":[{"lang":"en","value":"CAPEC-153 Input Data Manipulation"}]}],"source":{"discovery":"UNKNOWN"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark recommends a firmware update if your device has affected firmware.\n\n<br>"}],"value":"Lexmark recommends a firmware update if your device has affected firmware."}],"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-65081","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-02-04T04:56:08.400670Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T15:04:23.914Z"}}]}}}