Log in Start free

Vulnerability · Published Feb 13, 2025 · Assigned by Lexmark

CVE-2024-11346Access of Resource Using Incompatible Type in Postscript interpreter

High 7.3

In plain English

A high-severity type confusion in CX, XC, CS, MS, MX, XM, et. al. from Lexmark International. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.4%top 60.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.

Affected products (as reported)

VendorProductVersions
Lexmark International CX, XC, CS, MS, MX, XM, et. al. 0 – through CXTLS.240.076CXTLS.240.200 – before *0 – through MXTLS.240.076MXTLS.240.200 – before *0 – through CSTLS.240.076CSTLS.240.200 – before *0 – through MSNSN.240.042MSNSN.240.200 – before *

Weakness: CWE-843 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References