ZDI-CAN-28341: ZDI-26-064: (Pwn2Own) Lexmark CX532adwe execuserobject Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published Feb 5, 2026
·Updated
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65081.
Affected Software
1 affected component
Lexmark CX532adwe
Event History
Feb 5, 2026
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-28341?
ZDI-CAN-28341 is rated as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix ZDI-CAN-28341?
To mitigate ZDI-CAN-28341, update to the latest firmware provided by Lexmark for the CX532adwe printer.
3
Who is affected by ZDI-CAN-28341?
Organizations using the Lexmark CX532adwe printers are affected by ZDI-CAN-28341.
4
Can ZDI-CAN-28341 be exploited remotely?
Yes, ZDI-CAN-28341 allows network-adjacent attackers to exploit the vulnerability and execute arbitrary code.
5
Is authentication required to exploit ZDI-CAN-28341?
No, authentication is not required to exploit ZDI-CAN-28341.