CVE-2024-12648

Published: Jan 28, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd (Secondary)

Description

Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.

Affected (22)

Products: Canon: Mf455dw Firmware, Mf453dw Firmware, Mf452dw Firmware, Mf451dw Firmware, Mf465dw Firmware, Mf462dw Firmware, Mf656cdw Firmware, Mf654cdw Firmware, Mf653cdw Firmware, Mf652cw Firmware, Mf1238 Ii Firmware, Mf1440 Firmware, Mf1643if Ii Firmware, Mf1643i Ii Firmware, Lbp237dw Firmware, Lbp236dw Firmware, Lbp247dw Firmware, Lbp246dw Firmware, Lbp633cdw Firmware, Lbp632cdw Firmware, Lbp1238 Ii Firmware, Lbp1440 Firmware

22 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf455dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf455dw	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf453dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf453dw	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf452dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf452dw	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf451dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf451dw	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf465dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf465dw	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf462dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf462dw	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf656cdw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf656cdw	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf654cdw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf654cdw	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf653cdw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf653cdw	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf652cw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf652cw	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf1238 Ii Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf1238 Ii	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf1440 Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf1440	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf1643if Ii Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf1643if Ii	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Mf1643i Ii Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Mf1643i Ii	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp237dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp237dw	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp236dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp236dw	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp247dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp247dw	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp246dw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp246dw	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp633cdw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp633cdw	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp632cdw Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp632cdw	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp1238 Ii Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp1238 Ii	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Canon Lbp1440 Firmware	Up to 05.04

Running on/with	Platform Versions
Canon Lbp1440	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://canon.jp/support/support-info/250127vulnerability-response

Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd

Vendor Advisory

https://psirt.canon/advisory-information/cp2025-001/

Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd

Vendor Advisory

https://www.canon-europe.com/support/product-security/#news

Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd

Vendor Advisory

https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers

Source: f98c90f0-e9bd-4fa7-911b-51993f3571fd

Vendor Advisory

Timeline

No history available yet.