Out-of-bounds write in Canon Inc. Generic PCL6 V4 Printer Driver
Priority LOW 31CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Out-of-bounds vulnerability in slope processing during curve rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00623 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Canon Inc. | Generic PCL6 V4 Printer Driver | up to 2.1 | — | No fix listed | CNA |
| Canon Inc. | Generic UFR II V4 Printer Driver | up to 2.1 | — | No fix listed | CNA |
| Canon Inc. | Generic LIPSLX V4 Printer Driver | up to 2.1 | — | No fix listed | CNA |
- Generic PCL6 V4 Printer Driver VendorCanon Inc. Affected up to 2.1 Fixed in — No fix listed CNA
- Generic UFR II V4 Printer Driver VendorCanon Inc. Affected up to 2.1 Fixed in — No fix listed CNA
- Generic LIPSLX V4 Printer Driver VendorCanon Inc. Affected up to 2.1 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Canon Generic LIPSLX V4 Printer Driver, Generic PCL6 V4 Printer Driver, Generic UFR II V4 Printer Driver — psirt.canon/advisory-information/cp2025-002
3 records Highest priority Priority LOW 3 LOW
Other records, highest priority first
- TI-2025-00193 Out-of-bounds write in Canon Inc. Generic PCL6 V4 Printer DriverPriority LOW 31
- TI-2025-00192 Out-of-bounds write in Canon Inc. Generic PCL6 V4 Printer DriverPriority LOW 31
Timeline
- 2026-10-02 Threatist record created from CVE-2025-0236
- 2026-11-05 EPSS moved to the 50th–90th percentile
References
More Canon Inc. vulnerabilities
- TI-2006-01145 Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote… CVSS 2.0HIGH 7.5
- TI-2006-01147 Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary… CVSS 2.0HIGH 7.5
- TI-2023-05725 Out-of-bounds write in Canon Inc. Satera LBP670C Series CVSS 3.1CRITICAL 9.8
- TI-2025-01879 Out-of-bounds write in Canon Inc. Satera MF656Cdw CVSS 3.1CRITICAL 9.8
- TI-2024-11734 Out-of-bounds write in Canon Inc. Satera MF656Cdw CVSS 3.1CRITICAL 9.8
- TI-2024-11733 Out-of-bounds write in Canon Inc. Satera MF656Cdw CVSS 3.1CRITICAL 9.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences