Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
[ZDI-26-066|CVE-2025-65079] (Pwn2Own) Lexmark CX532adwe getCFFNames Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8; Credit: Team ANHTUD) https://www.zerodayinitiative.com/advisories/ZDI-26-066/
Post summary
Lexmark CX532adwe is disclosed as having a heap-based buffer overflow that allows remote code execution (CVSS 8.8), announced by ZDI with a Pwn2Own demonstration, and no patch is mentioned.
CVE-2025-65079 A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an att… https://www.cve.org/CVERecord?id=CVE-2025-65079
Post summary
A heap‑based buffer overflow was identified in the Postscript interpreter on Lexmark devices (CVE‑2025‑65079). No PoC, exploit code, active exploitation, patch, or debunking claim is mentioned.