ZDI-26-208 HIGH 8.8 Published Mar 16, 2026

Canon imageCLASS MF654Cdw TTF Parsing Integer Overflow Remote Code Execution Vulnerability

Canon

A critical vulnerability (CVE-2025-14237) in Canon imageCLASS MF654Cdw printers allows unauthenticated attackers on the network to execute arbitrary code with a CVSS score of 8.8. This is a severe threat since no authentication is required, meaning attackers can compromise the device without credentials. Security teams should immediately patch affected printers, restrict network access to these devices, and monitor for suspicious activity, as this vulnerability poses significant risk to network security and sensitive document handling.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy