Vulnerability · Published Jan 17, 2025 · Assigned by Lexmark

CVE-2023-50739A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.

High 8.8

In plain English

A high-severity heap buffer overflow in Printer Firmware from Lexmark. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.6%top 50.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

Affected products (as reported)

VendorProductVersions
Lexmark Printer Firmware 0 – through 230.209

Weakness: CWE-122 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References