by Kastro
Paper/Archive/CVE-2025-1268

CVE-2025-1268

Canon Inc. Generic Plus PCL6 Printer Driver — Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic P…

EPSS 0.8%CVSS 9.4
critical.is priorityof 100
40
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 57.3.573 × 2011.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / PDF Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver

Affected

ProductAffectedFixed inSource
Generic Plus PCL6 Printer Driver3.12 and earlier–CNA
Generic Plus UFR II Printer Driver3.12 and earlier–CNA
Generic Plus LIPS4 Printer Driver3.12 and earlier–CNA
Generic Plus LIPSLX Printer Driver3.12 and earlier–CNA
Generic Plus PS Printer Driver3.12 and earlier–CNA
Generic FAX Printer Driver10.65 and earlier–CNA
UFRII LT Printer Driver30.88 and earlier–CNA
CARPS2 Printer Driver31.01 and earlier–CNA
PDF Driver1.0.5.0 and earlier–CNA
LIPS4 Printer Driver15.00 and earlier–CNA
LIPSLX Printer Driver15.00 and earlier–CNA
UFR II Printer Driver15.00 and earlier–CNA

Scores by source

Canon (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.canon/advisory-information/cp2025-003advisorycanon.jp/support/support-info/250328vulnerability-responseadvisoryusa.canon.com/about-us/to-our-customers/service-notice-vulnerability-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-and-laser-printersadvisorycanon-europe.com/support/product-security