CVE-2023-26065
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
CVE-2023-26065 is a critical vulnerability (CVSS 9.8) in Lexmark Cslbl Firmware, published April 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 54th percentile. No source names a fixed version.
- Severity
- 9.8 CriticalCVSS 3.1, NVD
- Exploit chance
- 0.71%EPSS, 54th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- lexmark cslbl firmware
- lexmark cslbn firmware
- lexmark csnzj firmware
- lexmark cstpc firmware
- lexmark cstzj firmware
- lexmark cxlbl firmware
- lexmark cxlbn firmware
- lexmark cxtmm firmware
- lexmark cxtpc firmware
- lexmark cxtzj firmware
- lexmark lhs60 firmware
- lexmark lp firmware
Show 14 moreShow less
- lexmark lr firmware
- lexmark lw80 firmware
- lexmark mslbd firmware
- lexmark mslsg firmware
- lexmark msngm firmware
- lexmark msngw firmware
- lexmark mstgw firmware
- lexmark mxlbd firmware
- lexmark mxlsg firmware
- lexmark mxngm firmware
- lexmark mxtct firmware
- lexmark mxtgm firmware
- lexmark mxtgw firmware
- lexmark mxtpm firmware
What each source reports
NVD Score used
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
- Record
CVE-2023-26065- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
- Record
CVE-2023-26065- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2023-29939
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
- Record
EUVD-2023-29939- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7hpc-6gxc-8w7q
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
- Record
GHSA-7hpc-6gxc-8w7q- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.