Lbp1238 Ii Firmware
CVE-2025-14233
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Invalid free in CPCA file deletion processing on Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera LBP670C Series/Satera MF750C Series firmware v06.02 and earlier sold in Japan.Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i II/imageCLASS X MF1643iF II firmware v06.02 and earlier sold in US.i-SENSYS LBP630C Series/i-SENSYS MF650C Series/i-SENSYS LBP230 Series/1238P II/1238Pr II/i-SENSYS MF450 Series/i-SENSYS MF550 Series/1238i II/1238iF II/imageRUNNER 1643i II/imageRUNNER 1643iF II firmware v06.02 and earlier sold in Europe.
AnalysisAI
Canon printers contain an invalid free vulnerability in CPCA file deletion processing that allows network-based attackers to execute arbitrary code or crash the device.
Technical ContextAI
The CPCA (Common Peripheral Controlling Architecture) file deletion handler in Canon printers improperly frees memory (CWE-763), allowing an attacker to trigger a use-after-free condition by manipulating file deletion sequences.
RemediationAI
Apply Canon firmware updates. Restrict CPCA protocol access via network ACLs.
More in Lbp1238 Ii Firmware
View allCanon printers contain a buffer overflow in XPS font parsing that allows remote code execution through crafted print job
Canon Multifunction Printers have a buffer overflow in Address Book attribute tag processing that allows remote attacker
Canon printers contain a buffer overflow in XPS font fpgm table processing, enabling remote code execution when processi
Canon printers have a buffer overflow in CPCA list processing that allows remote attackers to execute arbitrary code thr
Canon printers have a buffer overflow in XML processing of XPS files that allows network-adjacent attackers to execute a
Canon Small Office Multifunction Printers and Laser Printers are vulnerable to a buffer overflow in WSD print job proces
Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow
Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may
Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may
Same weakness CWE-763 – Release of Invalid Pointer or Reference
View allShare
External POC / Exploit Code
Leaving vuln.today