Mf1643if Ii Firmware
CVE-2025-14233
CRITICAL
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Pointer release safety
|
| Impact | Network-exploitable. Invalid free vulnerabilities often lead to reliable code execution through heap manipulation techniques. |
| Exploit ScenarioDerived | An attacker sends a sequence of CPCA file operations that triggers the invalid free, then allocates controlled data in the freed memory region, hijacking execution flow. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Canon printers contain an invalid free vulnerability in CPCA file deletion processing that allows network-based attackers to execute arbitrary code or crash the device.
Earlier versions of this analysis (1)
Use-after-free in Canon CPCA protocol enables remote code execution on printers.
RemediationAI
Apply Canon firmware updates. Restrict CPCA protocol access via network ACLs.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The CPCA (Common Peripheral Controlling Architecture) file deletion handler in Canon printers improperly frees memory (CWE-763), allowing an attacker to trigger a use-after-free condition by manipulating file deletion sequences.
Know when Mf1643if Ii Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
Zero Day Initiative Advisories
Executive ViewAI
CVE-2025-14233 presents critical security risk rated CVSS 9.8. Successful exploitation could critically impact the confidentiality, integrity, and availability of affected systems. Organizations should apply vendor updates immediately when available and implement compensating controls in the interim.
Apply vendor patch. If immediate patching is not feasible: (1) Implement network-level access controls to limit exposure; (2) Enable enhanced monitoring and alerting; (3) Apply principle of least privilege.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
More in Mf1643if Ii Firmware
View allCanon printers contain a buffer overflow in XPS font parsing that allows remote code execution through crafted print job
Canon Multifunction Printers have a buffer overflow in Address Book attribute tag processing that allows remote attacker
Canon printers contain a buffer overflow in XPS font fpgm table processing, enabling remote code execution when processi
Canon printers have a buffer overflow in CPCA list processing that allows remote attackers to execute arbitrary code thr
Canon printers have a buffer overflow in XML processing of XPS files that allows network-adjacent attackers to execute a
Canon Small Office Multifunction Printers and Laser Printers are vulnerable to a buffer overflow in WSD print job proces
Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow
Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may
GitHub PoC
Exploit-DB