CVE-2024-12649

CRITICAL
2025-01-28 f98c90f0-e9bd-4fa7-911b-51993f3571fd
9.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 18:06 vuln.today
CVE Published
Jan 28, 2025 - 01:15 nvd
CRITICAL 9.8

Tags

Microsoft Memory Corruption Buffer Overflow RCE Mf455dw Firmware Mf453dw Firmware Mf452dw Firmware Mf451dw Firmware Mf465Dw Firmware Mf462Dw Firmware Mf656cdw Firmware Mf654cdw Firmware Mf653cdw Firmware Mf652cw Firmware Mf1238 Ii Firmware Mf1440 Firmware Mf1643if Ii Firmware Mf1643i Ii Firmware Lbp237dw Firmware Lbp236dw Firmware Lbp247Dw Firmware Lbp246Dw Firmware Lbp633cdw Firmware Lbp632cdw Firmware Lbp1238 Ii Firmware Lbp1440 Firmware

Description

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Analysis

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical Context

This vulnerability is classified as Out-of-bounds Write (CWE-787), which allows attackers to write data beyond allocated buffer boundaries leading to code execution or crashes. Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. Affected products include: Canon Mf455Dw Firmware, Canon Mf453Dw Firmware, Canon Mf452Dw Firmware, Canon Mf451Dw Firmware, Canon Mf465Dw Firmware.

Affected Products

Canon Mf455Dw Firmware, Canon Mf453Dw Firmware, Canon Mf452Dw Firmware, Canon Mf451Dw Firmware, Canon Mf465Dw Firmware.

Remediation

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate write boundaries, use memory-safe languages, enable compiler protections (ASLR, stack canaries).

Priority Score

49
Low Medium High Critical
KEV: 0
EPSS: +0.3
CVSS: +49
POC: 0

Share

CVE-2024-12649 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy