PT-2026-5949 · Lexmark · Lexmark Devices

Published 2026-02-03 · Updated 2026-02-12 · CVE-2025-65081

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Lexmark devices (affected versions not specified)

Description An out-of-bounds read issue exists in the Postscript interpreter used in Lexmark devices. An attacker can potentially use this to execute arbitrary code with unprivileged user permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-65081

ZDI-26-064

Affected Products

Lexmark Devices

References · 5

• https://zerodayinitiative.com/advisories/ZDI-26-064 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-65081 · Security Note
• https://twitter.com/TheZDIBugs/status/2022053462247149644 · Twitter Post
• https://lexmark.com/en_us/solutions/security/lexmark-security-advisories.html · Note
• https://twitter.com/CVEnew/status/2018799280476078187 · Twitter Post