CVE Feed

    Dashboard / CVE / CVE-2025-14231

    CVE-2025-14231

    Buffer overflow in print job processing by WSD on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

    Published:Jan 15, 2026
    Last Modified:Feb 26, 2026
    EPS:Jan 15, 2026
    EPSS Score:0.0004
    CVSS Score:9.8

    Affected Products

    Vendor
    Canon
    Product
    1238i Ii
    Vendor
    Canon
    Product
    1238if Ii
    Vendor
    Canon
    Product
    1238p Ii
    Vendor
    Canon
    Product
    1238pr Ii
    Vendor
    Canon
    Product
    Color Imageclass Lbp630c
    Vendor
    Canon
    Product
    Color Imageclass Mf650c
    Vendor
    Canon
    Product
    I-sensys Lbp230
    Vendor
    Canon
    Product
    I-sensys Lbp630c
    Vendor
    Canon
    Product
    I-sensys Mf450
    Vendor
    Canon
    Product
    I-sensys Mf550
    Vendor
    Canon
    Product
    I-sensys Mf650c
    Vendor
    Canon
    Product
    Imageclass Lbp230
    Vendor
    Canon
    Product
    Imageclass Mf450
    Vendor
    Canon
    Product
    Imageclass X Lbp1238 Ii
    Vendor
    Canon
    Product
    Imageclass X Mf1238 Ii
    Vendor
    Canon
    Product
    Imageclass X Mf1643i Ii
    Vendor
    Canon
    Product
    Imageclass X Mf1643if Ii
    Vendor
    Canon
    Product
    Imagerunner 1643i Ii
    Vendor
    Canon
    Product
    Imagerunner 1643if Ii
    Vendor
    Canon
    Product
    Lbp1238 Ii
    Vendor
    Canon
    Product
    Lbp1238 Ii Firmware
    Vendor
    Canon
    Product
    Lbp236dw
    Vendor
    Canon
    Product
    Lbp236dw Firmware
    Vendor
    Canon
    Product
    Lbp237dw
    Vendor
    Canon
    Product
    Lbp237dw Firmware
    Vendor
    Canon
    Product
    Lbp632cdw
    Vendor
    Canon
    Product
    Lbp632cdw Firmware
    Vendor
    Canon
    Product
    Lbp633cdw
    Vendor
    Canon
    Product
    Lbp633cdw Firmware
    Vendor
    Canon
    Product
    Mf1238 Ii
    Vendor
    Canon
    Product
    Mf1238 Ii Firmware
    Vendor
    Canon
    Product
    Mf1643i Ii
    Vendor
    Canon
    Product
    Mf1643i Ii Firmware
    Vendor
    Canon
    Product
    Mf1643if Ii
    Vendor
    Canon
    Product
    Mf1643if Ii Firmware
    Vendor
    Canon
    Product
    Mf451dw
    Vendor
    Canon
    Product
    Mf451dw Firmware
    Vendor
    Canon
    Product
    Mf452dw
    Vendor
    Canon
    Product
    Mf452dw Firmware
    Vendor
    Canon
    Product
    Mf453dw
    Vendor
    Canon
    Product
    Mf453dw Firmware
    Vendor
    Canon
    Product
    Mf455dw
    Vendor
    Canon
    Product
    Mf455dw Firmware
    Vendor
    Canon
    Product
    Mf652cdw
    Vendor
    Canon
    Product
    Mf652cw Firmware
    Vendor
    Canon
    Product
    Mf653cdw
    Vendor
    Canon
    Product
    Mf653cdw Firmware
    Vendor
    Canon
    Product
    Mf654cdw
    Vendor
    Canon
    Product
    Mf654cdw Firmware
    Vendor
    Canon
    Product
    Mf656cdw
    Vendor
    Canon
    Product
    Mf656cdw Firmware
    Vendor
    Canon
    Product
    Satera Lbp670c
    Vendor
    Canon
    Product
    Satera Mf750c

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-14237 (CVSS 9.3) — Buffer overflow in XPS font parse processing on Small Office Multifunction Printers and Laser Printers(*) whic…
    CVE-2025-14236 (CVSS 9.3) — Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers(*) which may a…
    CVE-2025-14235 (CVSS 9.3) — Buffer overflow in XPS font fpgm data processing on Small Office Multifunction Printers and Laser Printers(*) …
    CVE-2025-14234 (CVSS 9.3) — Buffer overflow in CPCA list processing on Small Office Multifunction Printers and Laser Printers(*) which may…
    CVE-2025-14233 (CVSS 9.3) — Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) whi…
    CVE-2025-14232 (CVSS 9.3) — Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) whi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High