Improper XML External Entity Handling in Lexmark Printer Drivers for Windows
CVE-2025-4044

8.2HIGH

Key Information:

Vendor

Lexmark

Status
Universal Print Driver
Printer Software G2
Vendor
CVE Published:
19 August 2025

What is CVE-2025-4044?

An improper restriction in various Lexmark printer drivers for Windows enables attackers to exploit XML External Entity references. This vulnerability could lead to the disclosure of sensitive information, potentially exposing user data to an arbitrary URL. Users of affected versions are advised to apply necessary security updates and review security advisories for guidance.

Affected Version(s)

Printer Software G2 Windows 0 < 2.17.0.0

Universal Print Driver Windows 0 < 3.0.6.0

References

https://www.lexmark.com/en_us/solutions/security/lexmark-...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-4044 : Improper XML External Entity Handling in Lexmark Printer Drivers for Windows