CVE-2025-9903
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Out-of-bounds write vulnerabilities have been identified in print processing of Canon printer drivers (Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, LIPS4, LIPSLX, UFR II, PS, PCL6). These may lead to memory corruption during print data processing.
Risk Assessment
The vulnerability may lead to driver crash or potential code execution in the printing process context. It requires delivering a crafted document for printing.
Recommendation
Update Canon printer drivers to the latest versions provided by the manufacturer.
Other vulnerabilities in Canon Printer Drivers
See all- CVE-2025-9904Medium
A vulnerability in Canon printer drivers (Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, and LIPS4, LIPSLX, UFR II, PS, PCL6 drivers) involves unallocated memory access during print processing. This may lead to driver crashes or unpredictable system behavior.
- CVE-2025-7698Medium
Out-of-bounds read vulnerabilities exist in print processing of multiple Canon printer drivers, including Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, and other listed drivers.
Original NVD description (English source)
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
Vulnerability data from NVD (NIST) · CISA KEV · EPSS