CVE-2024-12649

🗓️ 28 Jan 2025 00:39:54Reported by CanonType

Buffer overflow in XPS font processing may allow network attackers to crash printers or execute code.

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	Canon printer software Code Execution	9 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-12649	28 Jan 202500:54	–	circl
CNNVD	Canon Small Office Multifunction Printers 安全漏洞	28 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-12649	28 Jan 202500:39	–	cvelist
EUVD	EUVD-2024-51024	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers	29 Jan 202504:41	–	jvn
NVD	CVE-2024-12649	28 Jan 202501:15	–	nvd
OpenVAS	Canon Printers Multiple Vulnerabilities (CP2025-001)	7 Feb 202500:00	–	openvas
osv_cve	CVE-2024-12649	28 Jan 202501:15	–	osv_cve
Positive Technologies	PT-2025-1926	16 Dec 202400:00	–	ptsecurity

NVD

Node

AND

canon mf455dw_firmwareRange≤05.04

canon mf455dwMatch-

Node

AND

canon mf453dw_firmwareRange≤05.04

canon mf453dwMatch-

Node

AND

canon mf452dw_firmwareRange≤05.04

canon mf452dwMatch-

Node

AND

canon mf451dw_firmwareRange≤05.04

canon mf451dwMatch-

Node

AND

canon mf465dw_firmwareRange≤05.04

canon mf465dwMatch-

Node

AND

canon mf462dw_firmwareRange≤05.04

canon mf462dwMatch-

Node

AND

canon mf656cdw_firmwareRange≤05.04

canon mf656cdwMatch-

Node

AND

canon mf654cdw_firmwareRange≤05.04

canon mf654cdwMatch-

Node

AND

canon mf653cdw_firmwareRange≤05.04

canon mf653cdwMatch-

Node

AND

canon mf652cw_firmwareRange≤05.04

canon mf652cwMatch-

Node

AND

canon mf1238_ii_firmwareRange≤05.04

canon mf1238_iiMatch-

Node

AND

canon mf1440_firmwareRange≤05.04

canon mf1440Match-

Node

AND

canon mf1643if_ii_firmwareRange≤05.04

canon mf1643if_iiMatch-

Node

AND

canon mf1643i_ii_firmwareRange≤05.04

canon mf1643i_iiMatch-

Node

AND

canon lbp237dw_firmwareRange≤05.04

canon lbp237dwMatch-

Node

AND

canon lbp236dw_firmwareRange≤05.04

canon lbp236dwMatch-

Node

AND

canon lbp247dw_firmwareRange≤05.04

canon lbp247dwMatch-

Node

AND

canon lbp246dw_firmwareRange≤05.04

canon lbp246dwMatch-

Node

AND

canon lbp633cdw_firmwareRange≤05.04

canon lbp633cdwMatch-

Node

AND

canon lbp632cdw_firmwareRange≤05.04

canon lbp632cdwMatch-

Node

AND

canon lbp1238_ii_firmwareRange≤05.04

canon lbp1238_iiMatch-

Node

AND

canon lbp1440_firmwareRange≤05.04

canon lbp1440Match-

[
  {
    "product": "Satera MF656Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Satera MF654Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Color imageCLASS MF656Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Color imageCLASS MF654Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Color imageCLASS MF653Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Color imageCLASS MF652Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Color imageCLASS LBP633Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "Color imageCLASS LBP632Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "i-SENSYS MF657Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "i-SENSYS MF655Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "i-SENSYS MF651Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "i-SENSYS LBP633Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  },
  {
    "product": "i-SENSYS LBP631Cdw",
    "vendor": "Canon Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "05.04 and earlier"
      }
    ]
  }
]

Source	Link
usa	www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers
psirt	www.psirt.canon/advisory-information/cp2025-001/
canon-europe	www.canon-europe.com/support/product-security/
canon	www.canon.jp/support/support-info/250127vulnerability-response

17 Jun 2026 07:00Current

8High risk

Vulners AI Score8

CVSS 3.19.8

EPSS0.01202

SSVC

CWE-787