CVE-2023-26064
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
- Record
CVE-2023-26064- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
- Record
CVE-2023-26064- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2023-29938
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
- Record
EUVD-2023-29938- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vg9g-fp3v-9gx8
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
- Record
GHSA-vg9g-fp3v-9gx8- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
Affected products
- lexmark cslbl firmware
- lexmark cslbn firmware
- lexmark csnzj firmware
- lexmark cstpc firmware
- lexmark cstzj firmware
- lexmark cxlbl firmware
- lexmark cxlbn firmware
- lexmark cxtmm firmware
- lexmark cxtpc firmware
- lexmark cxtzj firmware
- lexmark lhs60 firmware
- lexmark lp firmware
Show 14 moreShow less
- lexmark lr firmware
- lexmark lw80 firmware
- lexmark mslbd firmware
- lexmark mslsg firmware
- lexmark msngm firmware
- lexmark msngw firmware
- lexmark mstgw firmware
- lexmark mxlbd firmware
- lexmark mxlsg firmware
- lexmark mxngm firmware
- lexmark mxtct firmware
- lexmark mxtgm firmware
- lexmark mxtgw firmware
- lexmark mxtpm firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-26064 is a critical vulnerability (CVSS 9.8) in Lexmark Cslbl Firmware, published April 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.