Skip to main content
← All vulnerabilities
CVE-2024-12649

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers() which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Canon Inc. Satera MF656Cdw

    Version range not reported

  • Canon Inc. Satera MF654Cdw

    Version range not reported

  • Canon Inc. Color imageCLASS MF656Cdw

    Version range not reported

  • Canon Inc. Color imageCLASS MF654Cdw

    Version range not reported

  • Canon Inc. Color imageCLASS MF653Cdw

    Version range not reported

  • Canon Inc. Color imageCLASS MF652Cdw

    Version range not reported

  • Canon Inc. Color imageCLASS LBP633Cdw

    Version range not reported

  • Canon Inc. Color imageCLASS LBP632Cdw

    Version range not reported

  • Canon Inc. i-SENSYS MF657Cdw

    Version range not reported

  • Canon Inc. i-SENSYS MF655Cdw

    Version range not reported

  • Canon Inc. i-SENSYS MF651Cdw

    Version range not reported

  • Canon Inc. i-SENSYS LBP633Cdw

    Version range not reported

  • Canon Inc. i-SENSYS LBP631Cdw

    Version range not reported

References 4

psirt.canon

canon.jp

usa.canon.com

canon-europe.com