Buffer Overflow Vulnerability in Canon Multifunction Printers and Laser Printers
CVE-2025-14232

9.3CRITICAL

Key Information:

Vendor

Canon Inc.

Status
Satera Lbp670c Series
Satera Mf750c Series
Color Imageclass Lbp630c
Color Imageclass Mf650c Series
Vendor
CVE Published:
15 January 2026

What is CVE-2025-14232?

A buffer overflow vulnerability has been identified in the XML processing of XPS files within specific models of Canon Multifunction Printers and Laser Printers. This flaw may allow an attacker on the same network segment to cause the affected devices to become unresponsive or potentially execute arbitrary code. The vulnerability impacts various models, highlighting the importance of timely firmware updates to mitigate potential exploits.

Affected Version(s)

1238i II 06.02 and earlier

1238iF II 06.02 and earlier

1238P II 06.02 and earlier

References

https://psirt.canon/advisory-information/cp2026-001/
vendor-advisory
https://canon.jp/support/support-info/260115vulnerability...
vendor-advisory
https://www.usa.canon.com/support/canon-product-advisorie...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.