Login Request a demo
Medium severity · published Feb 3, 2026
CVE-2025-65079
Heap-based buffer overflow vulnerability in Postscript interpreter
6.9
CVSS
0.5%
EPSS
No
On KEV
Description
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG · Lexmark
before 230.506 · source: vendor
MM
MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ · Lexmark
before 250.210 · source: vendor
Affected product
CC
CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG
Lexmark
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-65079
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-65079
www.lexmark.com
https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
More from CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG
9.3
CVE-2025-65078
Untrusted search path vulnerability in Embedded Solutions Framework
8.8
CVE-2025-65077
Relative path traversal vulnerability in Embedded Solutions Framework
6.9
CVE-2025-65081
Out-of-bounds read vulnerability in Postscript interpreter
6.9
CVE-2025-65080
Type confusion vulnerability in Postscript interpreter