CVE-2024-12649

Jan. 28, 2025, 1:15 a.m.

9.8
Critical

Description

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Product(s) Impacted

Product Versions
Small Office Multifunction Printers and Laser Printers
  • Satera MF656Cdw firmware v05.04 and earlier (Japan)
  • Color imageCLASS MF656Cdw firmware v05.04 and earlier (US)
  • i-SENSYS MF657Cdw firmware v05.04 and earlier (Europe)

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References

https://canon.jp/support/support-info/250127vulnerability-response
https://psirt.canon/advisory-information/cp2025-001/
https://www.canon-europe.com/support/product-security/#news
https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers

Tags

CWE-787
2025-01-28
f98c90f0-e9bd-4fa7-911b-51993f3571fd
CVE-2024-12649

CVSS Score

9.8 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: NONE
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: HIGH
  • Availability Impact: HIGH

    • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

    View Vector String

Timeline

Published: Jan. 28, 2025, 1:15 a.m.
Last Modified: Jan. 28, 2025, 1:15 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

f98c90f0-e9bd-4fa7-911b-51993f3571fd

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.