9.8

CVE-2025-14235

Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CanonMf656cdw Firmware Version <= 06.02
   CanonMf656cdw Version-
CanonMf653cdw Firmware Version <= 06.02
   CanonMf653cdw Version-
CanonMf652cw Firmware Version <= 06.02
   CanonMf652cdw Version-
CanonMf1238 Ii Firmware Version <= 06.02
   CanonMf1238 Ii Version-
CanonMf1643if Ii Firmware Version <= 06.02
   CanonMf1643if Ii Version-
CanonMf1643i Ii Firmware Version <= 06.02
   CanonMf1643i Ii Version-
CanonLbp237dw Firmware Version <= 06.02
   CanonLbp237dw Version-
CanonLbp236dw Firmware Version <= 06.02
   CanonLbp236dw Version-
CanonLbp633cdw Firmware Version <= 06.02
   CanonLbp633cdw Version-
CanonLbp632cdw Firmware Version <= 06.02
   CanonLbp632cdw Version-
CanonLbp1238 Ii Firmware Version <= 06.02
   CanonLbp1238 Ii Version-
CanonMf455dw Firmware Version <= 06.02
   CanonMf455dw Version-
CanonMf453dw Firmware Version <= 06.02
   CanonMf453dw Version-
CanonMf452dw Firmware Version <= 06.02
   CanonMf452dw Version-
CanonMf451dw Firmware Version <= 06.02
   CanonMf451dw Version-
CanonMf654cdw Firmware Version <= 06.02
   CanonMf654cdw Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.1% 0.288
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
f98c90f0-e9bd-4fa7-911b-51993f3571fd 9.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
f98c90f0-e9bd-4fa7-911b-51993f3571fd 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.