CVE-2025-9903
Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FAX Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
- Score
- CVSS 4.0 5.9 Medium
- Status
- Deferred - f98c90f0-e9bd-4fa7-911b-51993f3571fd
- Published
- 2025-09-29
- Last modified
- 2026-10-18
- Weaknesses
- CWE-787
Affected products
- Carps2 Printer Driver (Canon Inc.)
- Generic Fax Driver (Canon Inc.)
- Generic Plus Lips4 Printer Driver (Canon Inc.)
- Generic Plus Lipslx Printer Driver (Canon Inc.)
- Generic Plus Pcl6 Printer Driver (Canon Inc.)
- Generic Plus Ps Printer Driver (Canon Inc.)
- Generic Plus Ufr Ii Printer Driver (Canon Inc.)
- Lips4 Printer Driver (Canon Inc.)
- Lipslx Printer Driver (Canon Inc.)
- Pcl6 Printer Driver (Canon Inc.)
- Ps Printer Driver (Canon Inc.)
- Ufr Ii Printer Driver (Canon Inc.)
- Ufrii Lt Printer Driver (Canon Inc.)
References
- https://psirt.canon/advisory-information/cp2025-005/
- https://canon.jp/support/support-info/250925vulnerability-response
- https://www.usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-…
- https://www.canon-europe.com/support/product-security/
