Buffer Overflow Vulnerability in Canon Multifunction Printers and Laser Printers
CVE-2025-14235

9.3CRITICAL

Key Information:

Vendor

Canon Inc.

Status
Satera Lbp670c Series
Satera Mf750c Series
Color Imageclass Lbp630c
Color Imageclass Mf650c Series
Vendor
CVE Published:
15 January 2026

What is CVE-2025-14235?

A buffer overflow vulnerability exists in the font fpgm data processing of Canon's Small Office Multifunction Printers and Laser Printers. This issue may be exploited remotely by an attacker on the same network segment, potentially leading to the affected devices becoming unresponsive or executing arbitrary code. The vulnerable devices include specific models and firmware versions, particularly those sold in Japan, the US, and Europe. Users are advised to update their firmware to mitigate risks associated with this vulnerability.

Affected Version(s)

1238i II 06.02 and earlier

1238iF II 06.02 and earlier

1238P II 06.02 and earlier

References

https://psirt.canon/advisory-information/cp2026-001/
vendor-advisory
https://canon.jp/support/support-info/260115vulnerability...
vendor-advisory
https://www.usa.canon.com/support/canon-product-advisorie...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.