Buffer Overflow in Canon Small Office Multifunction Printers
CVE-2025-14236

9.3CRITICAL

Key Information:

Vendor

Canon Inc.

Status
Satera Lbp670c Series
Satera Mf750c Series
Color Imageclass Lbp630c
Color Imageclass Mf650c Series
Vendor
CVE Published:
15 January 2026

What is CVE-2025-14236?

A buffer overflow vulnerability exists in the attribute tag processing of Canon’s Small Office Multifunction Printers, which may allow an attacker on the same network segment to trigger an unresponsive state or execute arbitrary code. This affects multiple printer models with firmware versions 06.02 and earlier across different regions including Japan, the US, and Europe.

Affected Version(s)

1238i II 06.02 and earlier

1238iF II 06.02 and earlier

1238P II 06.02 and earlier

References

https://psirt.canon/advisory-information/cp2026-001/
vendor-advisory
https://canon.jp/support/support-info/260115vulnerability...
vendor-advisory
https://www.usa.canon.com/support/canon-product-advisorie...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.