Buffer Overflow Vulnerability in Canon Laser and Multifunction Printers
CVE-2025-14237

9.3CRITICAL

Key Information:

Vendor

Canon Inc.

Status
Satera Lbp670c Series
Satera Mf750c Series
Color Imageclass Lbp630c
Color Imageclass Mf650c Series
Vendor
CVE Published:
15 January 2026

What is CVE-2025-14237?

A buffer overflow vulnerability has been identified in the processing of XPS font data on Small Office Multifunction Printers and Laser Printers manufactured by Canon. This flaw enables an attacker on the same network segment to potentially disrupt the product's operation or execute arbitrary code, leading to unauthorized access or control. Affected devices include various series and models of Canon printers, particularly those with firmware v06.02 and earlier. Users are advised to update their firmware to mitigate this risk.

Affected Version(s)

1238i II 06.02 and earlier

1238iF II 06.02 and earlier

1238P II 06.02 and earlier

References

https://psirt.canon/advisory-information/cp2026-001/
vendor-advisory
https://canon.jp/support/support-info/260115vulnerability...
vendor-advisory
https://www.usa.canon.com/support/canon-product-advisorie...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.