Read the docs
TI-2025-40233 Aliases CVE-2025-65080GHSA-v5p5-42vv-7p25

Type confusion vulnerability in Postscript interpreter

Priority LOW 39CWE-843Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0053 45th percentileScored 2026-11-07
Fix Fixed MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ (Lexmark): 250.210CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG (Lexmark): 230.506

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LexmarkMXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJbefore 250.210250.210Patch availableCNA
LexmarkCSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSGbefore 230.506230.506Patch availableCNA
  • MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ VendorLexmark Affected before 250.210 Fixed in 250.210 Patch available CNA
  • CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG VendorLexmark Affected before 230.506 Fixed in 230.506 Patch available CNA

Remediation

  • Fix · CNA MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ (Lexmark) Fixed in 250.210
  • Fix · CNA CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG (Lexmark) Fixed in 230.506

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ 250.210

    5 records Highest priority Priority MEDIUM 2 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2025-40231 Untrusted search path vulnerability in Embedded Solutions FrameworkPriority MEDIUM 49
    • TI-2025-40230 Relative path traversal vulnerability in Embedded Solutions FrameworkPriority MEDIUM 47
    • TI-2025-40234 Out-of-bounds read vulnerability in Postscript interpreterPriority LOW 39
    Show all 5 records →
  • Release ·

    Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG 230.506

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2025-40234 Out-of-bounds read vulnerability in Postscript interpreterPriority LOW 39
    • TI-2025-40232 Heap-based buffer overflow vulnerability in Postscript interpreterPriority LOW 39
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-65080
  2. 2026-10-03 Alias added: GHSA-v5p5-42vv-7p25

References

Other 1

  • TI-2014-07170 Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark… CVSS 3.1CRITICAL 9.8
  • TI-2023-09391 In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. CVSS 3.1CRITICAL 9.8
  • TI-2023-11301 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4). CVSS 3.1CRITICAL 9.8
  • TI-2023-11300 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4). CVSS 3.1HIGH 8.1
  • TI-2023-09090 Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency. CVSS 3.1HIGH 7.5
  • TI-2021-20249 Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07. CVSS 3.1CRITICAL 9.8
See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences