Log in Start free

Vulnerability · Published Mar 31, 2025 · Assigned by Canon

CVE-2025-1268

Critical 9.4

In plain English

A critical-severity out-of-bounds write in CARPS2 Printer Driver from Canon Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).

Severity (CVSS 3.1)9.4Critical
Exploit odds (30 days)0.8%top 42.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / PDF Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver

Affected products (as reported)

VendorProductVersions
Canon Inc. Generic Plus PCL6 Printer Driver 3.12 and earlier
Canon Inc. Generic Plus UFR II Printer Driver 3.12 and earlier
Canon Inc. Generic Plus LIPS4 Printer Driver 3.12 and earlier
Canon Inc. Generic Plus LIPSLX Printer Driver 3.12 and earlier
Canon Inc. Generic Plus PS Printer Driver 3.12 and earlier
Canon Inc. Generic FAX Printer Driver 10.65 and earlier
Canon Inc. UFRII LT Printer Driver 30.88 and earlier
Canon Inc. CARPS2 Printer Driver 31.01 and earlier
Canon Inc. PDF Driver 1.0.5.0 and earlier
Canon Inc. LIPS4 Printer Driver 15.00 and earlier
Canon Inc. LIPSLX Printer Driver 15.00 and earlier
Canon Inc. UFR II Printer Driver 15.00 and earlier
Canon Inc. PS Printer Driver 15.00 and earlier
Canon Inc. PCL6 Printer Driver 15.00 and earlier

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

References