CVE Feed

    Dashboard / CVE / CVE-2024-12649

    CVE-2024-12649

    Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

    Published:Jan 28, 2025
    Last Modified:Jan 26, 2026
    EPS:Jan 28, 2025
    EPSS Score:0.00295
    CVSS Score:9.8

    Affected Products

    Vendor
    Canon
    Product
    Lbp1238 Ii
    Vendor
    Canon
    Product
    Lbp1238 Ii Firmware
    Vendor
    Canon
    Product
    Lbp1440
    Vendor
    Canon
    Product
    Lbp1440 Firmware
    Vendor
    Canon
    Product
    Lbp236dw
    Vendor
    Canon
    Product
    Lbp236dw Firmware
    Vendor
    Canon
    Product
    Lbp237dw
    Vendor
    Canon
    Product
    Lbp237dw Firmware
    Vendor
    Canon
    Product
    Lbp246dw
    Vendor
    Canon
    Product
    Lbp246dw Firmware
    Vendor
    Canon
    Product
    Lbp247dw
    Vendor
    Canon
    Product
    Lbp247dw Firmware
    Vendor
    Canon
    Product
    Lbp632cdw
    Vendor
    Canon
    Product
    Lbp632cdw Firmware
    Vendor
    Canon
    Product
    Lbp633cdw
    Vendor
    Canon
    Product
    Lbp633cdw Firmware
    Vendor
    Canon
    Product
    Mf1238 Ii
    Vendor
    Canon
    Product
    Mf1238 Ii Firmware
    Vendor
    Canon
    Product
    Mf1440
    Vendor
    Canon
    Product
    Mf1440 Firmware
    Vendor
    Canon
    Product
    Mf1643i Ii
    Vendor
    Canon
    Product
    Mf1643i Ii Firmware
    Vendor
    Canon
    Product
    Mf1643if Ii
    Vendor
    Canon
    Product
    Mf1643if Ii Firmware
    Vendor
    Canon
    Product
    Mf451dw
    Vendor
    Canon
    Product
    Mf451dw Firmware
    Vendor
    Canon
    Product
    Mf452dw
    Vendor
    Canon
    Product
    Mf452dw Firmware
    Vendor
    Canon
    Product
    Mf453dw
    Vendor
    Canon
    Product
    Mf453dw Firmware
    Vendor
    Canon
    Product
    Mf455dw
    Vendor
    Canon
    Product
    Mf455dw Firmware
    Vendor
    Canon
    Product
    Mf462dw
    Vendor
    Canon
    Product
    Mf462dw Firmware
    Vendor
    Canon
    Product
    Mf465dw
    Vendor
    Canon
    Product
    Mf465dw Firmware
    Vendor
    Canon
    Product
    Mf652cw
    Vendor
    Canon
    Product
    Mf652cw Firmware
    Vendor
    Canon
    Product
    Mf653cdw
    Vendor
    Canon
    Product
    Mf653cdw Firmware
    Vendor
    Canon
    Product
    Mf654cdw
    Vendor
    Canon
    Product
    Mf654cdw Firmware
    Vendor
    Canon
    Product
    Mf656cdw
    Vendor
    Canon
    Product
    Mf656cdw Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-14237 (CVSS 9.3) — Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) whic…
    CVE-2025-14236 (CVSS 9.3) — Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may a…
    CVE-2025-14235 (CVSS 9.3) — Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) …
    CVE-2025-14234 (CVSS 9.3) — Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may…
    CVE-2025-14233 (CVSS 9.3) — Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) whi…
    CVE-2025-14232 (CVSS 9.3) — Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) whi…
    CVE-2025-14231 (CVSS 9.3) — Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) wh…
    CVE-2024-12648 (CVSS 9.8) — Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) …
    CVE-2024-12647 (CVSS 9.8) — Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) …
    CVE-2023-6234 (CVSS 9.8) — Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printer…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High