CVE-2024-11346

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-843

Affected software

VendorProductVersions
Lexmark InternationalCX, XC, CS, MS, MX, XM, et. al.<= CXTLS.240.076; >= CXTLS.240.200, < *; <= MXTLS.240.076; >= MXTLS.240.200, < *; <= CSTLS.240.076; >= CSTLS.240.200, < *; <= MSNSN.240.042; >= MSNSN.240.200, < *; <= MSTSN.240.042; >= MSTSN.240.200, < *; <= MXTSN.240.042; >= MXTSN.240.200, < *; <= CSNGV.240.042; >= CSNGV.240.200, < *; <= CSTGV.240.042; >= CSTGV.240.200, < *; <= CXTGV.240.042; >= CXTGV.240.200, < *; <= CXTPC.240.042; >= CXTPC.240.200, < *

References

Timeline

Published
Feb 13, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-113477.3Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced IntCVE-2024-113485.3Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent tCVE-2024-113499.8The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. This is due to the plugCVE-2024-11357.5Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requestsCVE-2024-113509.8The AdForest theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.1.6. ThiCVE-2024-113515.3The Restrict – membership, site, content and user access restrictions for WordPress plugin for WordPress is vulnerable to Sensitive InformatCVE-2024-113526.4The TwentyTwenty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'twentytwenty' shortcode in all versionsCVE-2024-113534.3The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on CVE-2024-113544.3The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized modification of data due to a missiCVE-2024-113554.3The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized access of data due to a missing capCVE-2024-113566.1The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the page, which could alloCVE-2024-113575.9The goodlayers-core WordPress plugin before 2.0.10 does not sanitise and escape some of its settings, which could allow users with the contr