JVNDB-2025-001238

Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers

Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities (CWE-787, CVE-2024-12647, CVE-2024-12648, CVE-2024-12649, CVE-2025-2146).

Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.

A wide range of products and versions are affected. For more information, refer to "Vendor Information" section below.

Canon

• (multiple product)

A remote attacker may execute arbitrary code and/or cause a denial-of-service (DoS) condition.

[Update the firmware]
Update the firmware to the latest version according to the information provided by the developer.

[Apply the Workaround]
Apply the following workarounds to prevent access from untrusted entities.

* Use the product in an environment protected by a firewall, etc.
* Use the product with a private IP address

Canon

• Canon : CP2025-001 Vulnerabilities Mitigation/Remediation for Small Office Multifunction Printers and Laser Printers
• Canon Europe : CPE2025-001 – Regarding vulnerabilities Mitigation/Remediation for Small Office Multifunction Printers and Laser Printers
• Canon USA : Service Notice: Regarding Vulnerability Measure Against Buffer Overflow for Laser Printers and Small Office Multifunctional Printers

1. Out-of-bounds Write(CWE-787) [Other]

1. CVE-2024-12647
2. CVE-2024-12648
3. CVE-2024-12649
4. CVE-2025-2146

1. JVN : JVNVU#93455283

• [2025/01/29]
    Web page was published
• [2025/05/27]
    Overview was modified
    CVE : CVE-2025-2146 was added