9.8

CVE-2024-12649

Medienbericht
Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canon ≫ Mf455dw Firmware Version <= 05.04
   Canon ≫ Mf455dw Version -
Canon ≫ Mf453dw Firmware Version <= 05.04
   Canon ≫ Mf453dw Version -
Canon ≫ Mf452dw Firmware Version <= 05.04
   Canon ≫ Mf452dw Version -
Canon ≫ Mf451dw Firmware Version <= 05.04
   Canon ≫ Mf451dw Version -
Canon ≫ Mf465dw Firmware Version <= 05.04
   Canon ≫ Mf465dw Version -
Canon ≫ Mf462dw Firmware Version <= 05.04
   Canon ≫ Mf462dw Version -
Canon ≫ Mf656cdw Firmware Version <= 05.04
   Canon ≫ Mf656cdw Version -
Canon ≫ Mf654cdw Firmware Version <= 05.04
   Canon ≫ Mf654cdw Version -
Canon ≫ Mf653cdw Firmware Version <= 05.04
   Canon ≫ Mf653cdw Version -
Canon ≫ Mf652cw Firmware Version <= 05.04
   Canon ≫ Mf652cw Version -
Canon ≫ Mf1238 Ii Firmware Version <= 05.04
   Canon ≫ Mf1238 Ii Version -
Canon ≫ Mf1440 Firmware Version <= 05.04
   Canon ≫ Mf1440 Version -
Canon ≫ Mf1643if Ii Firmware Version <= 05.04
   Canon ≫ Mf1643if Ii Version -
Canon ≫ Mf1643i Ii Firmware Version <= 05.04
   Canon ≫ Mf1643i Ii Version -
Canon ≫ Lbp237dw Firmware Version <= 05.04
   Canon ≫ Lbp237dw Version -
Canon ≫ Lbp236dw Firmware Version <= 05.04
   Canon ≫ Lbp236dw Version -
Canon ≫ Lbp247dw Firmware Version <= 05.04
   Canon ≫ Lbp247dw Version -
Canon ≫ Lbp246dw Firmware Version <= 05.04
   Canon ≫ Lbp246dw Version -
Canon ≫ Lbp633cdw Firmware Version <= 05.04
   Canon ≫ Lbp633cdw Version -
Canon ≫ Lbp632cdw Firmware Version <= 05.04
   Canon ≫ Lbp632cdw Version -
Canon ≫ Lbp1238 Ii Firmware Version <= 05.04
   Canon ≫ Lbp1238 Ii Version -
Canon ≫ Lbp1440 Firmware Version <= 05.04
   Canon ≫ Lbp1440 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.2% 0.652
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Canon 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.08.2025 11:36
https://canon.jp/support/support-info/250127vulnerability-response
Vendor Advisory
https://psirt.canon/advisory-information/cp2025-001/
Vendor Advisory
https://www.canon-europe.com/support/product-security/#news
Vendor Advisory
https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers
Vendor Advisory