CVE-2023-50734

CriticalCVSS 9.0/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Feb 28, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-507359.0A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveragedCVE-2023-507369.0A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveragCVE-2023-507379.1The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged CVE-2023-507384.3A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection haCVE-2023-507398.8A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability caCVE-2023-50749.8Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.2CVE-2023-507405.3In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommeCVE-2023-507439.8Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registratCVE-2023-50756.7A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevatedCVE-2023-507529.8Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php CVE-2023-507539.8Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/updaCVE-2023-50765.4The Ziteboard Online Whiteboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ziteboard' shortcode in versions
CVE-2023-50734: Critical severity, CVSS 9.0 | Vulnix