Critical severity · published Mar 31, 2025
CVE-2025-1268
Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus…
9.4
CVSS
0.8%
EPSS
No
On KEV
Description
Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / PDF Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 57% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
CARPS2 Printer Driver · Canon Inc.
31.01 and earlier · source: vendor
GF
Generic FAX Printer Driver · Canon Inc.
10.65 and earlier · source: vendor
GP
Generic Plus LIPS4 Printer Driver · Canon Inc.
3.12 and earlier · source: vendor
GP
Generic Plus LIPSLX Printer Driver · Canon Inc.
3.12 and earlier · source: vendor
GP
Generic Plus PCL6 Printer Driver · Canon Inc.
3.12 and earlier · source: vendor
GP
Generic Plus PS Printer Driver · Canon Inc.
3.12 and earlier · source: vendor
GP
Generic Plus UFR II Printer Driver · Canon Inc.
3.12 and earlier · source: vendor
LP
LIPS4 Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
LP
LIPSLX Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
PP
PCL6 Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
PD
PDF Driver · Canon Inc.
1.0.5.0 and earlier · source: vendor
PP
PS Printer Driver · Canon Inc.
15.00 and earlier · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-1268
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-1268
canon.jp
https://canon.jp/support/support-info/250328vulnerability-response
psirt.canon
https://psirt.canon/advisory-information/cp2025-003/
www.canon-europe.com
https://www.canon-europe.com/support/product-security/
www.usa.canon.com
https://www.usa.canon.com/about-us/to-our-customers/service-notice-vulnerability-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-and-laser-printers
More from CARPS2 Printer Driver
5.9
CVE-2025-7698
Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus…
5.9
CVE-2025-9903
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus…
5.3
CVE-2025-9904
Unallocated memory access vulnerability in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic…