CVE-2024-11345
Published: 13 February 2025
Description
A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Security Summary
CVE-2024-11345 is a heap-based memory vulnerability, classified under CWE-787, affecting the Postscript interpreter in various Lexmark devices. Published on 2025-02-13T19:15:13.200, it carries a CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The issue enables attackers to execute arbitrary code by leveraging the memory corruption.
A remote attacker with no privileges or user interaction required can exploit this vulnerability over the network with low attack complexity. Exploitation results in low impacts to confidentiality, integrity, and availability, but critically allows arbitrary code execution on the targeted Lexmark device.
Lexmark provides details on this vulnerability through its security advisories page at https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html, which security practitioners should consult for mitigation guidance and patches.
Details
- CWE(s)