JVNDB-2026-001380

[Japanese]
JVNDB-2026-001380
Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers
Overview
Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple vulnerabilities listed below. Out-of-bounds write (CWE-787) - CVE-2025-14231, CVE-2025-14232, CVE-2025-14234, CVE-2025-14235, CVE-2025-14236, CVE-2025-14237 Release of invalid pointer or reference (CWE-763) - CVE-2025-14233 Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.
CVSS Severity (What is CVSS?)
CVSS V3 Severity: Base Metrics 9.8 (Critical) [Other] Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality Impact: High Integrity Impact: High Availability Impact: High The above CVSS base scores have been assigned for CVE-2025-14231, CVE-2025-14232, CVE-2025-14234, CVE-2025-14235, CVE-2025-14236, CVE-2025-14237
CVSS v3 Severity Base Metrics:9.8 (Critical) [Other] Access Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality Impact(C): High Integrity Impact(I): High Availability Impact(A): High The above CVSS base scores have been assigned for CVE-2025-14233
Affected Products
A wide range of products and versions are affected. For more information, refer to "Vendor Information" section below.
Canon (multiple product)

Impact
A remote attacker may execute arbitrary code and/or cause a denial-of-service (DoS) condition.
Solution
[Update the firmware] Update the firmware to the latest version according to the information provided by the developer. [Apply the Workaround] Apply the following workarounds to prevent access from untrusted entities. Use the product within a network protected by a firewall Use the product with a private IP address
Vendor Information
Canon Canon Europe : CPE2026-001 – Vulnerabilities Mitigation/Remediation for Small Office Multifunction Printers and Laser Printers Canon Inc. : CP2026-001 Vulnerabilities Mitigation/Remediation for Small Office Multifunction Printers and Laser Printers Canon USA : Service Notice: Regarding Remediation Measure Against Potential Buffer Overflow Vulnerability in Laser Printers and Small Office Multifunctional Printers
CWE (What is CWE?)
Release of Invalid Pointer or Reference(CWE-763) [Other] Out-of-bounds Write(CWE-787) [Other]
CVE (What is CVE?)
CVE-2025-14231 CVE-2025-14232 CVE-2025-14233 CVE-2025-14234 CVE-2025-14235 CVE-2025-14236 CVE-2025-14237
References
JVN : JVNVU#99107852
Revision History
[2026/01/19] Web page was published


Date Public	2026/01/16
Date First Published	2026/01/19
Date Last Updated	2026/01/19

Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers