CVE-2025-9904
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
A vulnerability in Canon printer drivers (Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, and LIPS4, LIPSLX, UFR II, PS, PCL6 drivers) involves unallocated memory access during print processing. This may lead to driver crashes or unpredictable system behavior.
Risk Assessment
An attacker could exploit this via a crafted print job, causing a driver crash or potentially code execution in the printing process context. The risk affects workstations and print servers using the listed drivers.
Recommendation
Update Canon printer drivers to the latest version provided by the vendor. Restrict access to printing functions and monitor for unusual print jobs.
Other vulnerabilities in Canon Printer Drivers
See all- CVE-2025-9903Medium
Out-of-bounds write vulnerabilities have been identified in print processing of Canon printer drivers (Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, LIPS4, LIPSLX, UFR II, PS, PCL6). These may lead to memory corruption during print data processing.
- CVE-2025-7698Medium
Out-of-bounds read vulnerabilities exist in print processing of multiple Canon printer drivers, including Generic Plus PCL6, UFR II, LIPS4, LIPSLX, PS, UFRII LT, CARPS2, Generic FAX, and other listed drivers.
Original NVD description (English source)
Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
Vulnerability data from NVD (NIST) · CISA KEV · EPSS