CVE-2025-14235

Description

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

CVSS breakdown

CVSS 4.0

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

None

User Interaction

None

Confidentiality (Vulnerable System)

High

Integrity (Vulnerable System)

High

Availability (Vulnerable System)

High

Confidentiality (Subsequent System)

None

Integrity (Subsequent System)

None

Availability (Subsequent System)

None

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected products

Canon Inc. / 1238iF II06.02 and earlier – 06.02 and earlier
Canon Inc. / 1238i II06.02 and earlier – 06.02 and earlier
Canon Inc. / 1238P II06.02 and earlier – 06.02 and earlier
Canon Inc. / 1238Pr II06.02 and earlier – 06.02 and earlier
Canon Inc. / Color imageCLASS LBP630C06.02 and earlier – 06.02 and earlier
Canon Inc. / Color imageCLASS MF650C Series06.02 and earlier – 06.02 and earlier
Canon Inc. / imageCLASS LBP230 Series06.02 and earlier – 06.02 and earlier
Canon Inc. / imageCLASS MF450 Series06.02 and earlier – 06.02 and earlier
Canon Inc. / imageCLASS X LBP1238 II06.02 and earlier – 06.02 and earlier
Canon Inc. / imageCLASS X MF1238 II06.02 and earlier – 06.02 and earlier
Canon Inc. / imageCLASS X MF1643iF II06.02 and earlier – 06.02 and earlier
Canon Inc. / imageCLASS X MF1643i II06.02 and earlier – 06.02 and earlier
Canon Inc. / imageRUNNER 1643iF II06.02 and earlier – 06.02 and earlier
Canon Inc. / imageRUNNER 1643i II06.02 and earlier – 06.02 and earlier
Canon Inc. / i-SENSYS LBP230 Series06.02 and earlier – 06.02 and earlier
Canon Inc. / i-SENSYS LBP630C Series06.02 and earlier – 06.02 and earlier
Canon Inc. / i-SENSYS MF450 Series06.02 and earlier – 06.02 and earlier
Canon Inc. / i-SENSYS MF550 Series06.02 and earlier – 06.02 and earlier
Canon Inc. / i-SENSYS MF650C Series06.02 and earlier – 06.02 and earlier
Canon Inc. / Satera LBP670C Series06.02 and earlier – 06.02 and earlier
Canon Inc. / Satera MF750C Series06.02 and earlier – 06.02 and earlier

Description

CVSS breakdown

Affected products

References