PT-2025-1926 · Canon · I-Sensys Mf651Cdw+12

Exluck · Published 2024-12-16 · Updated 2026-01-26 · CVE-2024-12649

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Color imageCLASS MF656Cdw versions v05.04 and earlier Color imageCLASS MF654Cdw versions v05.04 and earlier Color imageCLASS MF653Cdw versions v05.04 and earlier Color imageCLASS MF652Cdw versions v05.04 and earlier Color imageCLASS LBP633Cdw versions v05.04 and earlier Color imageCLASS LBP632Cdw versions v05.04 and earlier i-SENSYS MF657Cdw versions v05.04 and earlier i-SENSYS MF655Cdw versions v05.04 and earlier i-SENSYS MF651Cdw versions v05.04 and earlier i-SENSYS LBP633Cdw versions v05.04 and earlier i-SENSYS LBP631Cdw versions v05.04 and earlier Satera MF656Cdw versions v05.04 and earlier Satera MF654Cdw versions v05.04 and earlier

Description A buffer overflow issue in XPS data font processing may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.

Recommendations For Color imageCLASS MF656Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Color imageCLASS MF654Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Color imageCLASS MF653Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Color imageCLASS MF652Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Color imageCLASS LBP633Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Color imageCLASS LBP632Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For i-SENSYS MF657Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For i-SENSYS MF655Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For i-SENSYS MF651Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For i-SENSYS LBP633Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For i-SENSYS LBP631Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Satera MF656Cdw version v05.04 and earlier, update the firmware to a version later than v05.04. For Satera MF654Cdw version v05.04 and earlier, update the firmware to a version later than v05.04.

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-04001

CVE-2024-12649

ZDI-25-075

Affected Products

Color Imageclass Lbp632Cdw

Color Imageclass Lbp633Cdw

Color Imageclass Mf652Cdw

Color Imageclass Mf653Cdw

Color Imageclass Mf654Cdw

Color Imageclass Mf656Cdw

Satera Mf654Cdw

Satera Mf656Cdw

I-Sensys Lbp631Cdw

I-Sensys Lbp633Cdw

I-Sensys Mf651Cdw

I-Sensys Mf655Cdw

I-Sensys Mf657Cdw

References · 20

• https://psirt.canon/advisory-information/cp2025-001 · Vendor Advisory
• https://usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers · Vendor Advisory
• https://canon-europe.com/support/product-security/#news · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-075 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-12649 · Security Note
• https://canon.jp/support/support-info/250127vulnerability-response · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04001 · Security Note
• https://osv.dev/vulnerability/CVE-2024-12649 · Vendor Advisory
• https://twitter.com/fletch_ai/status/1885191436481815031 · Twitter Post
• https://twitter.com/CVEnew/status/1884183331564314751 · Twitter Post
• https://twitter.com/autumn_good_35/status/1884816650589110597 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1886527741610111302 · Twitter Post
• https://t.me/pentestingnews/70850 · Telegram Post
• https://t.me/cveNotify/149868 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1884797092314624073 · Twitter Post