Log in Start free

Vulnerability · Published Sep 29, 2025 · Assigned by Canon

CVE-2025-9904

Medium 5.3

In plain English

A medium-severity security flaw in CARPS2 Printer Driver from Canon Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.4%top 67.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver

Affected products (as reported)

VendorProductVersions
Canon Inc. Generic Plus PCL6 Printer Driver 3.30 and earlier
Canon Inc. Generic Plus UFR II Printer Driver 3.30 and earlier
Canon Inc. Generic Plus LIPS4 Printer Driver 3.30 and earlier
Canon Inc. Generic Plus LIPSLX Printer Driver 3.30 and earlier
Canon Inc. Generic Plus PS Printer Driver 3.30 and earlier
Canon Inc. UFRII LT Printer Driver 31.05 and earlier
Canon Inc. CARPS2 Printer Driver 31.05 and earlier
Canon Inc. Generic FAX Driver 10.67 and earlier
Canon Inc. LIPS4 Printer Driver 15.00 and earlier
Canon Inc. LIPSLX Printer Driver 15.00 and earlier
Canon Inc. UFR II Printer Driver 15.00 and earlier
Canon Inc. PS Printer Driver 15.00 and earlier
Canon Inc. PCL6 Printer Driver 15.00 and earlier

Weakness: CWE-696 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References