{"id":"CVE-2024-11347","aliases":["EUVD-2025-4912","GHSA-qh3f-r8jw-4x86"],"status":"published","title":"Access of Resource Using Incompatible Type in Postscript interpreter","description":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00434,"percentile":0.38011,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-190"],"published":"2025-02-13T18:55:22Z","modified":"2026-06-17T06:57:35Z","products":[{"vendor":"lexmark international","product":"cx, xc, cs, et. al."}],"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11347"},{"url":"https://github.com/advisories/GHSA-qh3f-r8jw-4x86"}],"sources":{"cve":[{"id":"CVE-2024-11347","title":"Access of Resource Using Incompatible Type in Postscript interpreter","description":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","status":"published","published":"2025-02-13T18:55:22.943Z","modified":"2025-02-13T19:09:37.473Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:19.615831Z"}],"euvd":[{"id":"EUVD-2025-4912","description":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","status":"published","published":"2025-02-13T18:55:22Z","modified":"2025-02-13T19:09:37Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T20:53:31.305109Z"}],"ghsa":[{"id":"GHSA-qh3f-r8jw-4x86","title":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. ...","description":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","status":"published","published":"2025-02-13T21:31:43Z","modified":"2025-02-13T21:31:49Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:59:56.485496Z"}],"nvd":[{"id":"CVE-2024-11347","description":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","status":"published","published":"2025-02-13T19:15:13.537Z","modified":"2026-06-17T06:57:35.26Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:10:44.508862Z"}]}}