Vulnerability details
CVE-2025-1268
Canon CARPS2 Printer DriverCanon Generic FAX Printer DriverCanon Generic Plus LIPS4 Printer DriverCanon Generic Plus LIPSLX Printer DriverCanon Generic Plus PCL6 Printer DriverCanon Generic Plus PS Printer Driver
CVSS 3.1
9.4Critical
Official description
Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / PDF Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.4Critical | 3.1 | CVEProject cvelistV5 (CNA) (Canon) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Canon Inc. | CARPS2 Printer Driver | 31.01 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | Generic FAX Printer Driver | 10.65 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | Generic Plus LIPS4 Printer Driver | 3.12 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | Generic Plus LIPSLX Printer Driver | 3.12 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | Generic Plus PCL6 Printer Driver | 3.12 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | Generic Plus PS Printer Driver | 3.12 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | Generic Plus UFR II Printer Driver | 3.12 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | LIPS4 Printer Driver | 15.00 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | LIPSLX Printer Driver | 15.00 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | PCL6 Printer Driver | 15.00 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | PDF Driver | 1.0.5.0 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | PS Printer Driver | 15.00 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | UFR II Printer Driver | 15.00 and earlier | CVEProject cvelistV5 (CNA) |
| Canon Inc. | UFRII LT Printer Driver | 30.88 and earlier | CVEProject cvelistV5 (CNA) |
References and advisories
4- https://psirt.canon/advisory-information/cp2025-003/ vendor-advisory
- https://canon.jp/support/support-info/250328vulnerability-response vendor-advisory
- https://www.usa.canon.com/about-us/to-our-customers/service-notice-vulnerability-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-and-laser-printers vendor-advisory
- https://www.canon-europe.com/support/product-security/ vendor-advisory
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-03-31
- Last updated
- 2026-03-16
- State
- Published
- Assigner (CNA)
- Canon
Exploit prediction (EPSS)
0.82%
Probability of exploitation in 30 days
57.4%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-787Out-of-bounds Write