CVE-2025-7698
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Out-of-bounds read vulnerabilities exist in print processing of multiple Canon printer drivers, including Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, and other listed drivers.
Risk Assessment
This may lead to memory information disclosure or application crashes when processing maliciously crafted print documents.
Recommendation
Update the affected printer drivers to the latest versions provided by the vendor.
Other vulnerabilities in Canon Printer Drivers
See all- CVE-2025-9904Medium
A vulnerability in Canon printer drivers (Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, and LIPS4, LIPSLX, UFR II, PS, PCL6 drivers) involves unallocated memory access during print processing. This may lead to driver crashes or unpredictable system behavior.
- CVE-2025-9903Medium
Out-of-bounds write vulnerabilities have been identified in print processing of Canon printer drivers (Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, LIPS4, LIPSLX, UFR II, PS, PCL6). These may lead to memory corruption during print data processing.
Original NVD description (English source)
Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
Vulnerability data from NVD (NIST) · CISA KEV · EPSS