Out-of-bounds read in Canon Inc. products - CVE-2025-7698

Vulnerability identifier: #VU116179

CSH Severity: High

CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-7698

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in print processing. A remote attacker can trigger an out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack..

Generic Plus PCL6 Printer Driver
Generic Plus UFR II Printer Driver
Generic Plus LIPS4 Printer Driver
Generic Plus LIPSLX Printer Driver
Generic Plus PS Printer Driver

Install updates from vendor's website.

Generic Plus PCL6 Printer Driver - update to 3.31
Generic Plus UFR II Printer Driver - update to 3.31
Generic Plus LIPS4 Printer Driver - update to 3.31
Generic Plus LIPSLX Printer Driver - update to 3.31
Generic Plus PS Printer Driver - update to 3.31

• https://jvn.jp/en/vu/JVNVU93104961/index.html
• https://psirt.canon/advisory-information/cp2025-005/
• https://www.usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-laser-printers
• https://www.canon-europe.com/support/product-security/

• Multiple vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers