Log in Start free

Vulnerability · Published Sep 29, 2025 · Assigned by Canon

CVE-2025-7698

Medium 5.9

In plain English

A medium-severity out-of-bounds read in CARPS2 Printer Driver from Canon Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.3%top 76.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver

Affected products (as reported)

VendorProductVersions
Canon Inc. Generic Plus PCL6 Printer Driver 3.30 and earlier
Canon Inc. Generic Plus UFR II Printer Driver 3.30 and earlier
Canon Inc. Generic Plus LIPS4 Printer Driver 3.30 and earlier
Canon Inc. Generic Plus LIPSLX Printer Driver 3.30 and earlier
Canon Inc. Generic Plus PS Printer Driver 3.30 and earlier
Canon Inc. UFRII LT Printer Driver 31.05 and earlier
Canon Inc. CARPS2 Printer Driver 31.05 and earlier
Canon Inc. Generic FAX Driver 10.67 and earlier
Canon Inc. LIPS4 Printer Driver 15.00 and earlier
Canon Inc. LIPSLX Printer Driver 15.00 and earlier
Canon Inc. UFR II Printer Driver 15.00 and earlier
Canon Inc. PS Printer Driver 15.00 and earlier
Canon Inc. PCL6 Printer Driver 15.00 and earlier

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L

References