Vulnerability-Lookup

CVE-2025-14232 (GCVE-0-2025-14232)

Vulnerability from cvelistv5 – Published: 2026-01-15 23:36 – Updated: 2026-02-26 15:04

Summary

Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

Severity

9.3 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-17 04:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

Canon jpcert root

References

4 references

URL	Tags
https://psirt.canon/advisory-information/cp2026-001/	vendor-advisory
https://canon.jp/support/support-info/260115vulne…	vendor-advisory
https://www.usa.canon.com/support/canon-product-a…	vendor-advisory
https://www.canon-europe.com/support/product-security/	vendor-advisory

Impacted products

21 products

Vendor	Product	Version	CPE status
Canon Inc.	Satera LBP670C Series	Affected: 06.02 and earlier	guessed
Canon Inc.	Satera MF750C Series	Affected: 06.02 and earlier	guessed
Canon Inc.	Color imageCLASS LBP630C	Affected: 06.02 and earlier	guessed
Canon Inc.	Color imageCLASS MF650C Series	Affected: 06.02 and earlier	guessed
Canon Inc.	imageCLASS LBP230 Series	Affected: 06.02 and earlier	guessed
Canon Inc.	imageCLASS X LBP1238 II	Affected: 06.02 and earlier	guessed
Canon Inc.	imageCLASS MF450 Series	Affected: 06.02 and earlier	guessed
Canon Inc.	imageCLASS X MF1238 II	Affected: 06.02 and earlier	guessed
Canon Inc.	imageCLASS X MF1643i II	Affected: 06.02 and earlier	guessed
Canon Inc.	imageCLASS X MF1643iF II	Affected: 06.02 and earlier	guessed
Canon Inc.	i-SENSYS LBP630C Series	Affected: 06.02 and earlier	guessed
Canon Inc.	i-SENSYS MF650C Series	Affected: 06.02 and earlier	guessed
Canon Inc.	i-SENSYS LBP230 Series	Affected: 06.02 and earlier	guessed
Canon Inc.	1238P II	Affected: 06.02 and earlier	guessed
Canon Inc.	1238Pr II	Affected: 06.02 and earlier	guessed
Canon Inc.	i-SENSYS MF450 Series	Affected: 06.02 and earlier	guessed
Canon Inc.	i-SENSYS MF550 Series	Affected: 06.02 and earlier	guessed
Canon Inc.	1238i II	Affected: 06.02 and earlier	guessed
Canon Inc.	1238iF II	Affected: 06.02 and earlier	guessed
Canon Inc.	imageRUNNER 1643i II	Affected: 06.02 and earlier	guessed
Canon Inc.	imageRUNNER 1643iF II	Affected: 06.02 and earlier	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-14232",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-17T04:55:16.757641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T15:04:05.866Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Satera LBP670C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "Satera MF750C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP630C",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF650C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS LBP230 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X LBP1238 II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS MF450 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X MF1238 II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X MF1643i II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X MF1643iF II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP630C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF650C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP230 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238P II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238Pr II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF450 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF550 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238i II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238iF II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageRUNNER 1643i II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageRUNNER 1643iF II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBuffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.\u003c/p\u003e"
            }
          ],
          "value": "Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-15T23:36:27.072Z",
        "orgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "shortName": "Canon"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.canon/advisory-information/cp2026-001/"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://canon.jp/support/support-info/260115vulnerability-response"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.canon-europe.com/support/product-security/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
    "assignerShortName": "Canon",
    "cveId": "CVE-2025-14232",
    "datePublished": "2026-01-15T23:36:27.072Z",
    "dateReserved": "2025-12-07T23:53:33.202Z",
    "dateUpdated": "2026-02-26T15:04:05.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-14232",
      "date": "2026-09-15",
      "epss": "0.00916",
      "percentile": "0.58278"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-14232\",\"sourceIdentifier\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"published\":\"2026-01-16T00:16:27.430\",\"lastModified\":\"2026-06-17T08:35:34.763\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.\"},{\"lang\":\"es\",\"value\":\"Desbordamiento de b\u00fafer en el procesamiento XML de archivos XPS en impresoras multifunci\u00f3n para peque\u00f1as oficinas e impresoras l\u00e1ser(*), lo que puede permitir a un atacante en el segmento de red provocar que el producto afectado deje de responder o ejecutar c\u00f3digo arbitrario. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 y anteriores vendidos en Jap\u00f3n. Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 y anteriores vendidos en EE. UU. i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 y anteriores vendidos en Europa.\"}],\"affected\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"affectedData\":[{\"vendor\":\"Canon Inc.\",\"product\":\"Satera LBP670C Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Satera MF750C Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS LBP630C\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"Color imageCLASS MF650C Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageCLASS LBP230 Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageCLASS X LBP1238 II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageCLASS MF450 Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageCLASS X MF1238 II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageCLASS X MF1643i II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageCLASS X MF1643iF II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS LBP630C Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS MF650C Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS LBP230 Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"1238P II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"1238Pr II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS MF450 Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"i-SENSYS MF550 Series\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"1238i II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"1238iF II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageRUNNER 1643i II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]},{\"vendor\":\"Canon Inc.\",\"product\":\"imageRUNNER 1643iF II\",\"versions\":[{\"version\":\"06.02 and earlier\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-17T04:55:16.757641Z\",\"id\":\"CVE-2025-14232\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"E97C016E-CE05-4F54-B4F6-CB44451E7025\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"376C5E10-0D6C-405D-BC63-BDE7257A8142\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"A65134F0-B34B-42BF-B0DD-3ED5DFB0EB08\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"020E1E4D-4055-446C-A403-544F50236262\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"3DB87B25-98FE-47A0-B2C3-D2CDD0E08910\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C814016-6D9B-483D-9C29-95E4624C6CA4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"3440DC39-8EE8-49A3-96E4-09D1ED5112E2\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"700050B9-DA11-4D63-A3DB-D6924DD7F3DF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf654cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"6144CE24-D420-4253-A047-4B2A21E36153\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf654cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"396973A5-0427-460C-A268-F44DE2E54C29\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf656cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"A2070566-9E21-464F-A85E-B4677CAEB4C8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf656cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4A3D591-82ED-42C4-B724-EDFA5E196066\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf653cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"8DC4A58D-AAD1-458B-A298-E9DDA48B8509\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf653cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31A2712C-6508-4DA4-B1EE-4A665063D9E8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf652cw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"4FE4781E-1F80-46BE-853A-34F637AEE709\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf652cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E67819E8-5A16-4552-A5DC-07CC1207AC54\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"7F071041-7B34-44E2-BCC6-D35079DA4DE6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"1B14B75C-B5A9-4916-B0C2-140E4530D21A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"264748B9-82FD-466C-894B-232305D930E4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"54C17BA1-1D30-4810-B6CB-AA771115AE1C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"60EF8B7A-8184-469E-AB2B-C13C24E4F01C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"C9012E07-C73F-4F78-A16C-305EA9F3AB76\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3406797E-EE0A-419B-862D-DBD8B505CCF6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"EFA67E60-E7A7-4D07-BB1E-D9E5971EB811\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4077161-199F-44A0-AE33-BC999E06B8E6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp633cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"7739A1A2-C899-4C6C-AA80-DE1045E06C90\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp633cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E319965-0012-44F0-92A1-481BACA5C140\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp632cdw_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"244CDE62-A03F-441D-A6BA-AEF7818DCFA1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp632cdw:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96F1019F-0C13-4FCD-B9C1-7B58D7080953\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"06.02\",\"matchCriteriaId\":\"3360B837-2F0F-482A-BBE9-55FEA4441DC4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF\"}]}]}],\"references\":[{\"url\":\"https://canon.jp/support/support-info/260115vulnerability-response\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://psirt.canon/advisory-information/cp2026-001/\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.canon-europe.com/support/product-security/\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers\",\"source\":\"f98c90f0-e9bd-4fa7-911b-51993f3571fd\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-03-27T09:00:45+00:00",
      "cve": "CVE-2025-14232",
      "id": "CVE-2025-14232",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2025-14232",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-14232.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"cna\": {\"affected\": [{\"product\": \"Satera LBP670C Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"Satera MF750C Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"Color imageCLASS LBP630C\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"Color imageCLASS MF650C Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageCLASS LBP230 Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageCLASS X LBP1238 II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageCLASS MF450 Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageCLASS X MF1238 II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageCLASS X MF1643i II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageCLASS X MF1643iF II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"i-SENSYS LBP630C Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"i-SENSYS MF650C Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"i-SENSYS LBP230 Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"1238P II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"1238Pr II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"i-SENSYS MF450 Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"i-SENSYS MF550 Series\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"1238i II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"1238iF II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageRUNNER 1643i II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}, {\"product\": \"imageRUNNER 1643iF II\", \"vendor\": \"Canon Inc.\", \"versions\": [{\"status\": \"affected\", \"version\": \"06.02 and earlier\"}]}], \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"\u003cp\u003eBuffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.\u003c/p\u003e\"}], \"value\": \"Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.\"}], \"metrics\": [{\"cvssV4_0\": {\"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"attackVector\": \"NETWORK\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\", \"exploitMaturity\": \"NOT_DEFINED\", \"privilegesRequired\": \"NONE\", \"providerUrgency\": \"NOT_DEFINED\", \"subAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"version\": \"4.0\", \"vulnAvailabilityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-787\", \"description\": \"CWE-787: Out-of-bounds Write\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"orgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"shortName\": \"Canon\", \"dateUpdated\": \"2026-01-15T23:36:27.072Z\"}, \"references\": [{\"tags\": [\"vendor-advisory\"], \"url\": \"https://psirt.canon/advisory-information/cp2026-001/\"}, {\"tags\": [\"vendor-advisory\"], \"url\": \"https://canon.jp/support/support-info/260115vulnerability-response\"}, {\"tags\": [\"vendor-advisory\"], \"url\": \"https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers\"}, {\"tags\": [\"vendor-advisory\"], \"url\": \"https://www.canon-europe.com/support/product-security/\"}]}, \"adp\": [{\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-14232\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-17T04:55:16.757641Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-16T15:45:34.539Z\"}, \"title\": \"CISA ADP Vulnrichment\"}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-14232\", \"assignerOrgId\": \"f98c90f0-e9bd-4fa7-911b-51993f3571fd\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"Canon\", \"dateReserved\": \"2025-12-07T23:53:33.202Z\", \"datePublished\": \"2026-01-15T23:36:27.072Z\", \"dateUpdated\": \"2026-01-17T04:55:15.944Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2025-14232

Vulnerability from fkie_nvd - Published: 2026-01-16 00:16 - Updated: 2026-06-17 08:35

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://canon.jp/support/support-info/260115vulnerability-response	Vendor Advisory
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://psirt.canon/advisory-information/cp2026-001/	Vendor Advisory
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.canon-europe.com/support/product-security/	Vendor Advisory
f98c90f0-e9bd-4fa7-911b-51993f3571fd	https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers	Vendor Advisory

Impacted products

Vendor	Product	Version
canon	mf455dw_firmware	*
canon	mf455dw	-
canon	mf453dw_firmware	*
canon	mf453dw	-
canon	mf452dw_firmware	*
canon	mf452dw	-
canon	mf451dw_firmware	*
canon	mf451dw	-
canon	mf654cdw_firmware	*
canon	mf654cdw	-
canon	mf656cdw_firmware	*
canon	mf656cdw	-
canon	mf653cdw_firmware	*
canon	mf653cdw	-
canon	mf652cw_firmware	*
canon	mf652cdw	-
canon	mf1238_ii_firmware	*
canon	mf1238_ii	-
canon	mf1643if_ii_firmware	*
canon	mf1643if_ii	-
canon	mf1643i_ii_firmware	*
canon	mf1643i_ii	-
canon	lbp237dw_firmware	*
canon	lbp237dw	-
canon	lbp236dw_firmware	*
canon	lbp236dw	-
canon	lbp633cdw_firmware	*
canon	lbp633cdw	-
canon	lbp632cdw_firmware	*
canon	lbp632cdw	-
canon	lbp1238_ii_firmware	*
canon	lbp1238_ii	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Satera LBP670C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "Satera MF750C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS LBP630C",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "Color imageCLASS MF650C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS LBP230 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X LBP1238 II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS MF450 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X MF1238 II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X MF1643i II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageCLASS X MF1643iF II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP630C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF650C Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS LBP230 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238P II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238Pr II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF450 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "i-SENSYS MF550 Series",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238i II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "1238iF II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageRUNNER 1643i II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        },
        {
          "product": "imageRUNNER 1643iF II",
          "vendor": "Canon Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "06.02 and earlier"
            }
          ]
        }
      ],
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf455dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E97C016E-CE05-4F54-B4F6-CB44451E7025",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf455dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "376C5E10-0D6C-405D-BC63-BDE7257A8142",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf453dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A65134F0-B34B-42BF-B0DD-3ED5DFB0EB08",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf453dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "020E1E4D-4055-446C-A403-544F50236262",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf452dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DB87B25-98FE-47A0-B2C3-D2CDD0E08910",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf452dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C814016-6D9B-483D-9C29-95E4624C6CA4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf451dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3440DC39-8EE8-49A3-96E4-09D1ED5112E2",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf451dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "700050B9-DA11-4D63-A3DB-D6924DD7F3DF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf654cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6144CE24-D420-4253-A047-4B2A21E36153",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf654cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "396973A5-0427-460C-A268-F44DE2E54C29",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf656cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2070566-9E21-464F-A85E-B4677CAEB4C8",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf656cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4A3D591-82ED-42C4-B724-EDFA5E196066",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf653cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC4A58D-AAD1-458B-A298-E9DDA48B8509",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf653cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31A2712C-6508-4DA4-B1EE-4A665063D9E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf652cw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FE4781E-1F80-46BE-853A-34F637AEE709",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf652cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E67819E8-5A16-4552-A5DC-07CC1207AC54",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1238_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F071041-7B34-44E2-BCC6-D35079DA4DE6",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1238_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B1DA9BB-15C1-4D4D-B73C-C995E859ACDC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1643if_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B14B75C-B5A9-4916-B0C2-140E4530D21A",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1643if_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "264748B9-82FD-466C-894B-232305D930E4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:mf1643i_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "54C17BA1-1D30-4810-B6CB-AA771115AE1C",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:mf1643i_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "60EF8B7A-8184-469E-AB2B-C13C24E4F01C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp237dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9012E07-C73F-4F78-A16C-305EA9F3AB76",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp237dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3406797E-EE0A-419B-862D-DBD8B505CCF6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp236dw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFA67E60-E7A7-4D07-BB1E-D9E5971EB811",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp236dw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4077161-199F-44A0-AE33-BC999E06B8E6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp633cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7739A1A2-C899-4C6C-AA80-DE1045E06C90",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp633cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E319965-0012-44F0-92A1-481BACA5C140",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp632cdw_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "244CDE62-A03F-441D-A6BA-AEF7818DCFA1",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp632cdw:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "96F1019F-0C13-4FCD-B9C1-7B58D7080953",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canon:lbp1238_ii_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3360B837-2F0F-482A-BBE9-55FEA4441DC4",
              "versionEndIncluding": "06.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:canon:lbp1238_ii:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "555C8CC6-7E64-48A6-BC31-2CAA03FA8FCF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en el procesamiento XML de archivos XPS en impresoras multifunci\u00f3n para peque\u00f1as oficinas e impresoras l\u00e1ser(*), lo que puede permitir a un atacante en el segmento de red provocar que el producto afectado deje de responder o ejecutar c\u00f3digo arbitrario. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 y anteriores vendidos en Jap\u00f3n. Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 y anteriores vendidos en EE. UU. i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 y anteriores vendidos en Europa."
    }
  ],
  "id": "CVE-2025-14232",
  "lastModified": "2026-06-17T08:35:34.763",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 9.3,
          "baseSeverity": "CRITICAL",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-14232",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-01-17T04:55:16.757641Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-01-16T00:16:27.430",
  "references": [
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://canon.jp/support/support-info/260115vulnerability-response"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://psirt.canon/advisory-information/cp2026-001/"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.canon-europe.com/support/product-security/"
    },
    {
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers"
    }
  ],
  "sourceIdentifier": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "f98c90f0-e9bd-4fa7-911b-51993f3571fd",
      "type": "Secondary"
    }
  ]
}

GHSA-MQV7-MFM2-RP2P

Vulnerability from github – Published: 2026-01-16 00:30 – Updated: 2026-01-16 00:30

Details

Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 (Critical)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-14232"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-01-16T00:16:27Z",
    "severity": "CRITICAL"
  },
  "details": "Buffer overflow in XML processing of XPS file in Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.",
  "id": "GHSA-mqv7-mfm2-rp2p",
  "modified": "2026-01-16T00:30:55Z",
  "published": "2026-01-16T00:30:55Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14232"
    },
    {
      "type": "WEB",
      "url": "https://canon.jp/support/support-info/260115vulnerability-response"
    },
    {
      "type": "WEB",
      "url": "https://psirt.canon/advisory-information/cp2026-001"
    },
    {
      "type": "WEB",
      "url": "https://www.canon-europe.com/support/product-security"
    },
    {
      "type": "WEB",
      "url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Remediation-Measure-Against-Potential-Buffer-Overflow-Vulnerability-in-Laser-Printers-and-Small-Office-Multifunctional-Printers"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

JVNDB-2026-001380

Vulnerability from jvndb - Published: 2026-01-19 01:08 - Updated:2026-01-19 01:08

Severity

9.8 (Critical) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers

Details

Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple vulnerabilities listed below.

Out-of-bounds write (CWE-787) - CVE-2025-14231, CVE-2025-14232, CVE-2025-14234, CVE-2025-14235, CVE-2025-14236, CVE-2025-14237
Release of invalid pointer or reference (CWE-763) - CVE-2025-14233

Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

References

Type

URL

	JVN	https://jvn.jp/en/vu/JVNVU99107852/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14231
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14232
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14233
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14234
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14235
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14236
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-14237
	Release of Invalid Pointer or Reference(CWE-763)	https://cwe.mitre.org/data/definitions/763.html
	Out-of-bounds Write(CWE-787)	https://cwe.mitre.org/data/definitions/787.html

Impacted products

Vendor

Product

Canon Inc.

(multiple product)

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-001380.html",
  "dc:date": "2026-01-19T10:08+09:00",
  "dcterms:issued": "2026-01-19T10:08+09:00",
  "dcterms:modified": "2026-01-19T10:08+09:00",
  "description": "Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple vulnerabilities listed below.\u003cul\u003e\u003cli\u003eOut-of-bounds write (CWE-787) - CVE-2025-14231, CVE-2025-14232, CVE-2025-14234, CVE-2025-14235, CVE-2025-14236, CVE-2025-14237\u003c/li\u003e\u003cli\u003eRelease of invalid pointer or reference (CWE-763) - CVE-2025-14233\u003c/li\u003e\u003c/ul\u003eCanon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-001380.html",
  "sec:cpe": {
    "#text": "cpe:/a:canon:multiple_product",
    "@product": "(multiple product)",
    "@vendor": "Canon Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "9.8",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-001380",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU99107852/index.html",
      "@id": "JVNVU#99107852",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14231",
      "@id": "CVE-2025-14231",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14232",
      "@id": "CVE-2025-14232",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14233",
      "@id": "CVE-2025-14233",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14234",
      "@id": "CVE-2025-14234",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14235",
      "@id": "CVE-2025-14235",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14236",
      "@id": "CVE-2025-14236",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-14237",
      "@id": "CVE-2025-14237",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/763.html",
      "@id": "CWE-763",
      "@title": "Release of Invalid Pointer or Reference(CWE-763)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/787.html",
      "@id": "CWE-787",
      "@title": "Out-of-bounds Write(CWE-787)"
    }
  ],
  "title": "Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-14232 (GCVE-0-2025-14232)

FKIE_CVE-2025-14232

GHSA-MQV7-MFM2-RP2P

JVNDB-2026-001380

Tags

Sightings

Nomenclature

Related by attack behaviour